I got it working -----Original Message----- From: Steven Thompson [mailto:steven@bidorbuy.co.za] Sent: 04 June 2001 10:28 To: SuSE security mailing list (E-mail) Subject: [suse-security] POP3 and SSLWRAP - help question Hi All I have installed the POP.rpm off the SuSE 6.4 with SSLWRAP and OPENSSL. I have Updated the POP.rpm from SuSE site. I have created a normal user account ( no cyrus mail boxes). Pop3 acces is no problem. Retrieving pop3 mail via SSL is the problem. I have created my own Certificate, as shown in the README.SuSE (i.e) openssl req -config /usr/ssl/openssl.cnf -nodes -new -x509 -keyout my_cert.pem -out my_cert.pem -days 365 Inetd.conf setings: pop3s stream tcp nowait cyrus /usr/sbin/tcpd /usr/sbin/sslwrap -nocert 110 Mail Clients: Outlook Express and Outlook 2000. Q1. Do you leave the standard pop3 service running, but only allow connection from the localhost(127.0.0.1) or do u comment it out. Q2. When I try to fetch my pop3 mail via the ssl port there is connection to sslwrap service from the requesting host. Then there is connection to the popper service from the cyrus user to the localhost(127.0.0.1). After the cyrus user connection to localhost the mail client produces an error and is unable to retrieve the mail. Q3. When does my mail client have to have a certificate. In order for ssl to work. Q4. Are there any config files I have to tweak. All tips welcome. Thanks in Advance Steven --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com