Hi all,
I have just installed PHP in FC5, and also the php-imap RPM. However it
seems that I cannot log in my IMAP server neither with TLS nor SSL. I
am suspecting this has something to do with certificates (I used to
compile uw-imap myself, using SSLCERTS to point at my certificate
location). My question is, having the RPM installed, how can I specify
where the certificates are located? If this is not possible, where
exactly does the RPM look for certificates?

On Tue, 10 Oct 2006, grpprod wrote:
> I have just installed PHP in FC5, and also the php-imap RPM. However it
> seems that I cannot log in my IMAP server neither with TLS nor SSL. I
> am suspecting this has something to do with certificates (I used to
> compile uw-imap myself, using SSLCERTS to point at my certificate
> location). My question is, having the RPM installed, how can I specify
> where the certificates are located? If this is not possible, where
> exactly does the RPM look for certificates?

For any UW imapd binary:

The command
strings imapd | grep certs
will show you where the CA certificates (and default location for private
keys) are located.

Normally on Redhat this is /usr/share/ssl/certs and on Fedora this is
/etc/pki/tls/certs .

The command
strings imapd | grep private
will show you the location for the private keys (such as your site's
server certificates) if it is not the same as the certs directory.

Normally on Redhat this is /usr/share/ssl/private and on Fedora this is
/etc/pki/tls/private .

Good luck!

-- Mark --

http://staff.washington.edu/mrc
Science does not emerge from voting, party politics, or public debate.
Si vis pacem, para bellum.

> For any UW imapd binary:
>
> The command
> strings imapd | grep certs
> will show you where the CA certificates (and default location for private
> keys) are located.
>
> Normally on Redhat this is /usr/share/ssl/certs and on Fedora this is
> /etc/pki/tls/certs .
>

Thanks,
the thing is that it does not seem that IMAP server is installed in
Fedora. php-imap seems to install only the extension, whereas
libc-client seems only suitable for development purposes. I could not
find an imapd binary. Is it included in Fedora?

Also, provided that I will eventually find it, is it enough that I copy
my certificates in the location you mention for imapd to use them?

> For any UW imapd binary:
>
> The command
> strings imapd | grep certs
> will show you where the CA certificates (and default location for private
> keys) are located.

Thanks,
the thing is it does not seem that imapd is installed (IMAP server is
located in another machine). Are the certificates necessary for PHP to
login to that machine or not?
Also, I would appreciate any debugging features that would me to
understand why I cannot connect to my IMAP server from PHP. The only
thing that I see (for example when using IMP) in the log is:

Oct 10 23:52:41 HORDE [error] [imp] FAILED LOGIN 1.2.3.4 to
mx.mydomain.com:993[imap/ssl/novalidate-cert] as user [on line 258 of
"/var/www/html/horde/imp/lib/Auth/imp.php"]

On Tue, 10 Oct 2006, grpprod wrote:
> the thing is that it does not seem that IMAP server is installed in
> Fedora. php-imap seems to install only the extension, whereas
> libc-client seems only suitable for development purposes. I could not
> find an imapd binary. Is it included in Fedora?

If what is installed is just the c-client library, then do the strings
command on the libc-client.a file (or whatever it's called):
strings libc-client.a | grep certs

> Also, provided that I will eventually find it, is it enough that I copy
> my certificates in the location you mention for imapd to use them?

Yes, but what's in c-client should be the standard location for the
certificates on your system. If it isn't, then I suggest that you
not use a third-party RPM and instead using the unmodified UW
sources and build using that.

I understand the convenience of RPMs, but I can't vouch for how they were
built or what may be in them.

-- Mark --

http://staff.washington.edu/mrc
Science does not emerge from voting, party politics, or public debate.
Si vis pacem, para bellum.

On Tue, 10 Oct 2006, grpprod wrote:
> Also, I would appreciate any debugging features that would me to
> understand why I cannot connect to my IMAP server from PHP. The only
> thing that I see (for example when using IMP) in the log is:
>
> Oct 10 23:52:41 HORDE [error] [imp] FAILED LOGIN 1.2.3.4 to
> mx.mydomain.com:993[imap/ssl/novalidate-cert] as user [on line 258 of
> "/var/www/html/horde/imp/lib/Auth/imp.php"]

You might be better off asking this question in a PHP group. The message
that you quoted didn't include any IMAP server messages.

-- Mark --

http://staff.washington.edu/mrc
Science does not emerge from voting, party politics, or public debate.
Si vis pacem, para bellum.