[courier-users] Question about courier-imap and ssl

[Shaun T. E. <st...@st...>]

I just installed it on FreeBSD 5.2.1-RELEASE-p1. It's working nicely 
with my MySQL backend. Now I'd like to secure the connection.

Looking at the two startup scripts, it looks like there are two ways to 
secure the connection:

2c2
< # $Id: imapd.rc.in,v 1.23 2003/11/27 21:07:34 mrsam Exp $
---
 > # $Id: imapd-ssl.rc.in,v 1.15 2003/11/27 21:07:33 mrsam Exp $
26d25
< . /usr/local/etc/courier-imap/imapd-ssl
27a27
 > . /usr/local/etc/courier-imap/imapd-ssl
49,57c49,56
<                       prefix=/usr/local ;
<                       exec_prefix=/usr/local ;
<                       bindir=${exec_prefix}/bin ;
<                       libexecdir=/usr/local/libexec/courier-imap ;
<                               . /usr/local/etc/courier-imap/imapd ; \
<                               . /usr/local/etc/courier-imap/imapd-ssl ; \
<               IMAP_STARTTLS=$IMAPDSTARTTLS ; export IMAP_STARTTLS ; \
<               TLS_PROTOCOL=$TLS_STARTTLS_PROTOCOL ; \
<               /usr/local/libexec/courier-imap/couriertcpd 
-address=$ADDRESS \
---
 >               prefix=/usr/local ;
 >               exec_prefix=/usr/local ;
 >               bindir=${exec_prefix}/bin ;
 >               libexecdir=/usr/local/libexec/courier-imap ;
 >               . /usr/local/etc/courier-imap/imapd ; \
 >               . /usr/local/etc/courier-imap/imapd-ssl ; \
 >               IMAP_TLS=1; export IMAP_TLS; \
 >               /usr/local/libexec/courier-imap/couriertcpd 
-address=$SSLADDRESS
  \
59c58
<                       -stderrloggername=imapd \
---
 >                       -stderrloggername=imapd-ssl \
61,62c60,62
<                       -pid=$PIDFILE $TCPDOPTS \
<                       $PORT ${exec_prefix}/sbin/imaplogin 
$LIBAUTHMODULES \
---
 >                       -pid=$SSLPIDFILE $TCPDOPTS \
 >                       $SSLPORT $COURIERTLS -server -tcpd \
 >                               ${exec_prefix}/sbin/imaplogin 
$LIBAUTHMODULES \
66c66
<       /usr/local/libexec/courier-imap/couriertcpd -pid=$PIDFILE -stop
---
 >       /usr/local/libexec/courier-imap/couriertcpd -pid=$SSLPIDFILE -stop


I don't understand the differences between the two methods, and why I 
might choose one over the other (or both?). Can someone educate me o 
this, please? TIA.

	-ste