Multiple SSL Certs with virtual domains?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I am about to bring up the second of several virtual domains on my
Cyrus-IMAPd 2.3.15 installation.  I've been Googling but can't seem
to come up with a useful search string for finding posts talking
about using multiple secure certificates for POP/IMAP connections to
mail.domain1.com and mail.domainN.com.  We are rolling up multiple small
mail servers into one host.

The only thing I've been able to figure is that I will need to at least
have multiple imapd-domainX.conf files and have multiple pop3(s)/imap(s)
lines in cyrus.conf for each domain so that the secure certs can match
the hostname configured in the user's existing mail program.  

Is there a more elegant method than something like the below plan?

SERVICES {
  # add or remove based on preferences
  imap        cmd="imapd -C imapd-domain1.conf" listen="mail.domain1.com:imap"
  imaps        cmd="imapd -s -C imapd-domain1.conf" listen="mail.domain1.com:imaps"
  pop3        cmd="pop3d -C imapd-domain1.conf" listen="mail.domain1.com:pop3"
  pop3s        cmd="pop3d -s -C imapd-domain1.conf" listen="mail.domain1.com:pop3s"
  imap        cmd="imapd -C imapd-domain2.conf" listen="mail.domain2.com:imap"
  imaps        cmd="imapd -s -C imapd-domain2.conf" listen="mail.domain2.com:imaps"
  pop3        cmd="pop3d -C imapd-domain2.conf" listen="mail.domain2.com:pop3"
  pop3s        cmd="pop3d -s -C imapd-domain2.conf" listen="mail.domain2.com:pop3s"
  ...
  imap        cmd="imapd -C imapd-domainN.conf" listen="mail.domainN.com:imap"
  imaps        cmd="imapd -s -C imapd-domainN.conf" listen="mail.domainN.com:imaps"
  pop3        cmd="pop3d -C imapd-domainN.conf" listen="mail.domainN.com:pop3"
  pop3s        cmd="pop3d -s -C imapd-domainN.conf" listen="mail.domainN.com:pop3s"
  sieve         cmd="timsieved" listen="sieve" prefork=0

  lmtpunix      cmd="lmtpd" listen="/var/imap/socket/lmtp" prefork=0
}

Where imapd.conf has my current imapd.conf contents but the
tls_cert_file: and tls_key_file: variables have been ripped out and
imapd-domainX.conf is:

-------------------------------------------------------------
@include: imapd.conf
tls_cert_file: /pathtocert/domainX.crt
tls_key_file: /pathtokey/domainX.key
-------------------------------------------------------------

-- 
Scott Lambert                    KC5MLE                       Unix SysAdmin
lambert@xxxxxxxxxxxxxx

----
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux