https://bugzilla.novell.com/show_bug.cgi?id=420972 Robert Vojcik changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-screening@forge.provo.novell.com |hvogel@novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=420972 User suse-beta@cboltz.de added comment https://bugzilla.novell.com/show_bug.cgi?id=420972#c2 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED CC| |suse-beta@cboltz.de Resolution|FIXED | --- Comment #2 from Christian Boltz 2009-03-08 10:55:00 MST --- This change breaks TLS (POP3 command "STLS") :-( I see two ways how this can be solved: a) easy: revert the changes in the initscript b) perfect: add a variable like "ENABLE_TLS" to /etc/courier/pop3 and read /etc/courier/pop3-ssl only if it is set to YES. (Default should be YES) IMHO fetching mails (and sending the password) over a non-encrypted connection is not a good idea, so solution a) might be enough. (The original bugreporter might disagree ;-) In case other affected users find this bug: as workaround, take the /etc/init.d/pop and /etc/init.d/imap initscripts from openSUSE 11.0. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=420972 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-screening@forge.pr |hvogel@novell.com |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=420972 User suse-beta@cboltz.de added comment https://bugzilla.novell.com/show_bug.cgi?id=420972#c4 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |REOPENED Info Provider|suse-beta@cboltz.de | --- Comment #4 from Christian Boltz 2009-03-09 11:12:39 MST --- As you probably know, TLS means to start encrypted communication on the "non-encrypted" pop3 port (110). It's impossible to know which certificate to use (TLS_CERTFILE) etc. without reading the pop3d-ssl config file which contains these settings. Short story: Courier simply does not offer the "STLS" command on port 110, which means using TLS is impossible. Long story: http://listi.jpberlin.de/pipermail/postfixbuch-users/2009-March/048641.html (Note: I did not test with IMAP, but I expect it shares this problem.) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=420972 User suse-beta@cboltz.de added comment https://bugzilla.novell.com/show_bug.cgi?id=420972#c6 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|INVALID | --- Comment #6 from Christian Boltz 2009-03-10 08:34:44 MST --- Henne, did you actually test this before closing the bug as invalid? (I could also point you to bug 168595#c5 with s/Olaf/Christian/ ;-) To make it short: - /etc/init.d/courier-pop starts a daemon that listens on the pop3 port (110) - /etc/init.d/courier-pop-ssl starts a daemon that listens on the pop3s port (995) [NOT on port 110] - this means: the courier-pop and courier-pop-ssl _start_different_things_ - but: even the pop3 daemon on port 110 needs the SSL configuration to be able to offer TLS. If you don't trust me, please test yourself against a 11.0 and a 11.1 server with courier running. The easiest method is to test the server capabilities with KMail - you'll notice that TLS encryption is not available on the 11.1 server. If you prefer manual testing, telnet on port 110 and try "STLS" or "CAPA". -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.