From 625b34b34f98514d8ba41490662a54fecfd39fe8 Mon Sep 17 00:00:00 2001 From: "Eric S. Raymond" Date: Sun, 31 Oct 1999 17:17:43 +0000 Subject: Final integration. svn path=/trunk/; revision=2645 --- fetchmail-FAQ.html | 65 ++++++++++++++---------------------------------------- 1 file changed, 16 insertions(+), 49 deletions(-) (limited to 'fetchmail-FAQ.html') diff --git a/fetchmail-FAQ.html b/fetchmail-FAQ.html index 563b68a2..cb56c633 100644 --- a/fetchmail-FAQ.html +++ b/fetchmail-FAQ.html @@ -10,7 +10,7 @@
Back to Fetchmail Home Page To Site Map -$Date: 1999/10/26 18:18:05 $ +$Date: 1999/10/31 17:17:42 $

Frequently Asked Questions About Fetchmail

@@ -444,9 +444,10 @@ OTP, you will specify a password but it will not be sent en clair.

Sadly, there is at present (September 1999) no OTP or APOP-like facility generally available on IMAP servers. However, there do exist patches which will OTP-enable the University of Washington IMAP -daemon, version 4.2-FINAL. And we have a report that the GSSAPI -support in fetchmail works with the GSSAPI support in the most recent -version of UW IMAP.

+daemon, version 4.2-FINAL. We have a report that the GSSAPI support +in fetchmail works with the GSSAPI support in the most recent version +of UW IMAP. Or you can use SSL for complete +end-to-end encryption if you have an SSL-enabled mailserver.

You can get both POP3 and IMAP OTP patches from Craig Metz, over FTP via either @@ -1692,51 +1693,17 @@ your .fetchmailrc, or across the network.

K5. How can I use fetchmail with SSL?

-The U.S. government's never-to-be-sufficiently-damned EAR regulations -prevent me from including SSL library hooks in the distribution. -However, the First Amendment of the U.S. Constitution hasn't been -eviscerated (not yet, anyway -- our would-be totalitarians are -working on trashing the Second Amendment first).

+You'll need to have the OpenSSL +libraries installed. Configure with --with-ssl. If you have the +OpenSSL libraries installed in the default location (/usr/local/ssl) +this will suffice. If you have them installed in a non-default +location, you'll need to specify it as an argument to --with-ssl after +an equal sign.

-

Option 1:

- -I can therefore safely tell you, in documentation, that there -appears to be a way to set up an SSL command chain using the `plugin' -option (originally designed for handling proxy connections across -firewalls).

- -Get your hands on the SSLeay code. -Now make yourself a script called `ssl_connect' that calls the SSLeay -utility `s_client' as follows:

- -

-/usr/local/ssl/bin/s_client -quiet -ssl2 -connect $1:$2
-
- -Now add `plugin ssl_connect' to the server options for your connection.

- -

Option 2:

- -For those in the U.S., there is a set of SSL patches for fetchmail -available from the North -American Cryptographic Archives, in the SSL directory. You have -to answer three questions about your qualification to access the -archive, before you are allowed in. You can enter through the main -page for the server and browse the archive, or you can go straight to -the SSL directory. There you will find patch files against the -fetchmail release sources as well as patched source tarballs.

- -While we cannot make the SSL sources available to anyone outside of the -U.S. at this time, if the patches do leak out of the U.S. through no -fault of our own, and someone informs us of their location, we can -provide the URL pointing to archive sites outside of the U.S.

- -Newer versions of the SSL patches make appear in the `new' directory -and stay there a while until they can be processed and moved to the SSL -directory. Check for patches in `new' if you do not find patches -for the latest fetchmail release.

+Fetchmail binaries built this way support ssl, +sslkey, and sslcert options that control +SSL encryption. You will need to have an SSL-enabled mailserver +to use these options. See the manual page for detals.

R1. Fetchmail isn't working, and -v shows `SMTP connect failed' messages.

@@ -2514,7 +2481,7 @@ inactivity timeout.

Back to Fetchmail Home Page To Site Map -$Date: 1999/10/26 18:18:05 $ +$Date: 1999/10/31 17:17:42 $

Eric S. Raymond <esr@snark.thyrsus.com>
-- cgit v1.2.3