Article delegate-en <_A4058@delegate-en.ML_>
  upper oldest olders older1 this newer1 newers latest
search
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
[delegate-en/4058] [Reference:<_A4057@delegate-en.ML_>]
Newsgroups: mail-lists.delegate-en

[DeleGate-En] Re: How to verify a server's certificate?
09 Aug 2008 10:18:41 GMT feedback@delegate.org (Yutaka Sato)
The DeleGate Project


Hi,

In message <_A4057@delegate-en.ML_> on 08/09/08(02:51:03)
you Monika Schilling <p3ehqbdyi.ml@ml.delegate.org> wrote:
 |After this initial step "make encyption work" I want to wanted to go further 
 |to "verify the identify of the peer". So I made following change to the 
 |configuration:
...
 |  STLS="fsv,sslway -Vrfy -CAfile CA.pem -vd"
 |
 |According to the manual I put the file CA.pem into the directory {DGROOT}/lib.
 |
 |Unfortunately this does not work. DeleGate does not verify the certificate of 
 |the remote pop3s server: 
 |==========================================================================
 |08/08 18:14:06.80 [32270] 1+0: ## SSLway CFI_TYPE=FSV: -co is assumed
 |08/08 18:14:06.80 [32270] 1+0: ## SSLway start
 |08/08 18:14:06.81 [32270] 1+0: ## SSLway CAs = [/home/ms/delegate/lib/CA.pem]
 |  []
 |08/08 18:14:06.81 [32270] 1+0: ## SSLway B7ADEB90 loadSession 0.000031 (0
 |  0) / -1
 |08/08 18:14:06.93 [32270] 1+0: ## SSLway depth=1/-1 ok=1
 |  0:"ok" /C=ZA/ST=Western Cape/L=Cape Town/O=Thawte Consulting
 |  cc/OU=Certification Services Division/CN=Thawte Premium Server 
 |  CA/emailAddress=premium-server@thawte..
 |08/08 18:14:06.93 [32270] 1+0: ## SSLway depth=0/-1 ok=1
 |  0:"ok" /C=DE/ST=Rheinland-Pfalz/L=Montabaur/O=1 und 1 Internet
 |  AG/CN=pop.1und1.de
 |08/08 18:14:07.05 [32270] 1+0: ## SSLway connected

Why do you think that DeleGate did not verify it?
Your log shows that the verification of the server's certificate is
succeeded (ok=1) based on your CAfile at [/home/ms/delegate/lib/CA.pem],
thus the SSL connecition is established.

Cheers,
Yutaka
--
  9 9   Yutaka Sato <y.sato@delegate.org> http://delegate.org/y.sato/
 ( ~ )  National Institute of Advanced Industrial Science and Technology
_<   >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan
Do the more with the less -- B. Fuller

  admin search upper oldest olders older1 this newer1 newers latest
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
@_@V