Re: [gentoo-server] how to create qmail CA certifications for virtual domains

[Kalin KOZHUHAROV]

widyachacra wrote:
> Dear List Friends,
>
> I'm using netqmail for three(3) domains(virtual mail). I want to
> create separate CA certifications for each three(3) virtual mail
> domains. How can i do this?
Not sure what exactly you are trying to achieve, please clarify.

Let me guess:

Q: You want to use SMTP/SSL and probably POP3/SSL and you want the
server to respond with different server certificate (nothing to do with
CA) for each vdomain?

A: You can NOT do this if you are running on a single IP. If you run
several instances of tcpserver (or sslserver from sys-apps/ucspi-ssl) it
probably can be easily done if you setup three instances on three
different IPs.  But might not work, has to think it. You might need to
have a fourth "master" tcpserver.
In ASCII it might look like:

client_1======>sslserver_1---tcpclient_1---
                                           \
.......                                     |--->tcpserver_0-->qmail-smtpd --- vpopmail
                                           /
client_N======>sslserver_N---tcpclient_2---

Everything can be implemented on one machine with several IP addresses
(or ports, but it is messy). Similar stuff for the POP3/SSL.
Basically this is a dirtbag SSL accelerator ;-D

DISCLAIMER: This is off-the-top-of-my-head, it might not work ;-)

Kalin.

-- 
|[ ~~~~~~~~~~~~~~~~~~~~~~ ]|
+-> http://ThinRope.net/ <-+
|[ ______________________ ]|

-- 
gentoo-server@g.o mailing list