Jason Lindquist (jlindquist) wrote,
Jason Lindquist

Well Goddamn...

I've been doing some system software work lately. I took over the mailing list for the kids' baseball team, which gave me a good excuse to install Mailman. It occurred to me I still hadn't installed SquirrelMail, which I would have done a long time ago except it depended on an IMAP server which I wasn't running at the time.

Since then, I've installed Dovecot. Dovecot and Apple Mail don't get along perfectly, they both believe it's the other's responsibility to provide a complete chain of SSL certificates. So every time I launch Mail, I get a warning that it can't verify the SSL certificate that Dovecot presents it. It's a nuisance dialog to click through, but otherwise things work. mutt and Outlook Express don't blink at this.

While trying to trace an issue with SquirrelMail and IMAPS, I ran across a HOWTO on Postfix, Dovecot, JAMM, OpenLDAP, SSL, and SASL. Keith wrote JAMM, so I looked it over. I followed its link to the Dovecot wiki, thinking maybe I could take another shot at the SSL cert issue. Sho 'nuff, there is an entry for chained SSL certificates.

I tried getting this to work before, but never figured out that order was important. You have to start at the local public certificate and work your way backwards towards the root. Since I get my cert from Comodo's InstantSSL service, my certificate chain goes:
Local cert -> ComodoSecurityServicesCA.crt -> GTECyberTrustRoot.crt

Bingo, no more complaints from Mail.

SquirrelMail, by the way, is damned cool. It not only Just Works out of the box, it has a built-in plugin for new mail notification. Amongst the included WAV files is the "MESSAGE FOR YOU, SIR!" clip from Monty Python and the Holy Grail. This is the same clip that Jay Kreibich used for MacBiff ten years ago, and which I use for text/voicemail notification on my cell phone.

Of course, I modified SquirrelMail's fortune plugin to call yow instead.

I'm using my X-RAY VISION to obtain a rare glimpse of the
                                -- Zippy the Pinhead

  • Aurora reference

    For reference, the only two links I could find on Aurora shooter (and Westview '06 grad) James Holmes, prior to his attendance at Westview being…

  • Your friend, FunnyJunk.com

    If you've never heard of funnyjunk.com, it's run by a content thief. It's a haven for incompetence, stupidity, and douchebaggery. Site owner…

  • X-header crap

    It is ridiculous how big this section of my .muttrc has gotten. Every goddamned special snowflake mailer has to have its own collection of…

  • Post a new comment


    default userpic

    Your reply will be screened

    Your IP address will be recorded 

    When you submit the form an invisible reCAPTCHA check will be performed.
    You must follow the Privacy Policy and Google Terms of use.