Re: [gentoo-server] how to create qmail CA certifications for virtual domains

[widyachacra]

you guessed it correctly: My server has only one IP.

On 10/17/07, Kalin KOZHUHAROV <kalin@××××××××.net> wrote:
>
> widyachacra wrote:
> > Dear List Friends,
> >
> > I'm using netqmail for three(3) domains(virtual mail). I want to
> > create separate CA certifications for each three(3) virtual mail
> > domains. How can i do this?
> Not sure what exactly you are trying to achieve, please clarify.
>
> Let me guess:
>
> Q: You want to use SMTP/SSL and probably POP3/SSL and you want the
> server to respond with different server certificate (nothing to do with
> CA) for each vdomain?
>
> A: You can NOT do this if you are running on a single IP. If you run
> several instances of tcpserver (or sslserver from sys-apps/ucspi-ssl) it
> probably can be easily done if you setup three instances on three
> different IPs.  But might not work, has to think it. You might need to
> have a fourth "master" tcpserver.
> In ASCII it might look like:
>
> client_1======>sslserver_1---tcpclient_1---
>                                            \
> .......                                     |--->tcpserver_0-->qmail-smtpd
> --- vpopmail
>                                            /
> client_N======>sslserver_N---tcpclient_2---
>
> Everything can be implemented on one machine with several IP addresses
> (or ports, but it is messy). Similar stuff for the POP3/SSL.
> Basically this is a dirtbag SSL accelerator ;-D
>
> DISCLAIMER: This is off-the-top-of-my-head, it might not work ;-)
>
> Kalin.
>
> --
> |[ ~~~~~~~~~~~~~~~~~~~~~~ ]|
> +-> http://ThinRope.net/ <-+
> |[ ______________________ ]|
>
> --
> gentoo-server@g.o mailing list
>
>


-- 
---

- Widyachacra Rajapaksha -