This documentation is for Dovecot v1.x, see wiki2 for v2.x documentation.
Differences between revisions 10 and 11
Revision 10 as of 2007-09-01 22:50:54
Size: 504
Editor: TimoSirainen
Comment: Link looks just like an advertisement with not much useful info related to email certs, removed
Revision 11 as of 2008-12-13 15:09:13
Size: 1287
Editor: TimoSirainen
Comment:
Deletions are marked like this. Additions are marked like this.
Line 2: Line 2:

SSL and TLS terms are often used in confusing ways:

 * SSL (Secure Sockets Layer) is the original protocol implementation. SSLv3 is still allowed by Dovecot, but it's rarely used. Some clients use SSL to mean that they're going to connect to the imaps port (993), although they're still going to use TLSv1 protocol.
 * TLS (Transport Layer Security) replaced the SSL protocol. TLSv1 protocol is used practically always nowadays. Some clients use TLS to mean that they're going to use STARTTLS command after connecting to the standard imap port (143). Nothing would prevent using SSLv3 protocol after STARTTLS command.

SSL term is much more widely understood than TLS, so Dovecot configuration and this documentation only talks about SSL when in fact it means both SSL/TLS.

SSL

SSL and TLS terms are often used in confusing ways:

  • SSL (Secure Sockets Layer) is the original protocol implementation. SSLv3 is still allowed by Dovecot, but it's rarely used. Some clients use SSL to mean that they're going to connect to the imaps port (993), although they're still going to use TLSv1 protocol.
  • TLS (Transport Layer Security) replaced the SSL protocol. TLSv1 protocol is used practically always nowadays. Some clients use TLS to mean that they're going to use STARTTLS command after connecting to the standard imap port (143). Nothing would prevent using SSLv3 protocol after STARTTLS command.

SSL term is much more widely understood than TLS, so Dovecot configuration and this documentation only talks about SSL when in fact it means both SSL/TLS.

  • [:SSL/CertificateCreation:Creating SSL certificates]

  • [:SSL/DovecotConfiguration:Configuring Dovecot to use SSL certificates]

  • [:SSL/CertificateClientImporting:Importing CAs and self-signed SSL certificates to clients]

  • SSL works pretty much the same universally, so for more information about SSL you can see for example [http://httpd.apache.org/docs/2.2/ssl/ Apache's documentation].

  • Dovecot uses OpenSSL, so whatever information you find about it applies also to Dovecot.

None: SSL (last edited 2011-08-29 01:27:30 by TimoSirainen)