You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-dev@james.apache.org by bt...@apache.org on 2018/07/05 02:01:34 UTC

[12/13] james-project git commit: JAMES-2394 Clarify that protocols don't need to share TLS keys.

JAMES-2394 Clarify that protocols don't need to share TLS keys.


Project: http://git-wip-us.apache.org/repos/asf/james-project/repo
Commit: http://git-wip-us.apache.org/repos/asf/james-project/commit/26df561f
Tree: http://git-wip-us.apache.org/repos/asf/james-project/tree/26df561f
Diff: http://git-wip-us.apache.org/repos/asf/james-project/diff/26df561f

Branch: refs/heads/master
Commit: 26df561f3f41d0d977f8c2a423dd3765f30e32c7
Parents: 4c27a8a
Author: benwa <bt...@linagora.com>
Authored: Wed Jul 4 13:55:57 2018 +0700
Committer: benwa <bt...@linagora.com>
Committed: Thu Jul 5 08:59:57 2018 +0700

----------------------------------------------------------------------
 src/site/xdoc/server/config-imap4.xml      | 4 +++-
 src/site/xdoc/server/config-pop3.xml       | 4 +++-
 src/site/xdoc/server/config-smtp-lmtp.xml  | 4 +++-
 src/site/xdoc/server/feature-protocols.xml | 2 ++
 4 files changed, 11 insertions(+), 3 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/james-project/blob/26df561f/src/site/xdoc/server/config-imap4.xml
----------------------------------------------------------------------
diff --git a/src/site/xdoc/server/config-imap4.xml b/src/site/xdoc/server/config-imap4.xml
index 0348a7d..1dab962 100644
--- a/src/site/xdoc/server/config-imap4.xml
+++ b/src/site/xdoc/server/config-imap4.xml
@@ -58,7 +58,9 @@
         <dt><strong>tls</strong></dt>
         <dd>Set to true to support STARTTLS or SSL for the Socket.
          To use this you need to copy sunjce_provider.jar to /path/james/lib directory. To create a new keystore execute:
-             keytool -genkey -alias james -keyalg RSA -keystore /path/to/james/conf/keystore</dd>
+             keytool -genkey -alias james -keyalg RSA -keystore /path/to/james/conf/keystore<br/>
+        Please note that each IMAP server exposed on different port can specify its own keystore, independently from any other
+        TLS based protocols.</dd>
         <dt><strong>handler.helloName</strong></dt>
         <dd>This is the name used by the server to identify itself in the IMAP4 
         protocol.  If autodetect is TRUE, the server will discover its 

http://git-wip-us.apache.org/repos/asf/james-project/blob/26df561f/src/site/xdoc/server/config-pop3.xml
----------------------------------------------------------------------
diff --git a/src/site/xdoc/server/config-pop3.xml b/src/site/xdoc/server/config-pop3.xml
index 7acc82e..137aff6 100644
--- a/src/site/xdoc/server/config-pop3.xml
+++ b/src/site/xdoc/server/config-pop3.xml
@@ -51,7 +51,9 @@
         <dt><strong>tls</strong></dt>
         <dd>Set to true to support STARTTLS or SSL for the Socket.
          To use this you need to copy sunjce_provider.jar to /path/james/lib directory. To create a new keystore execute:
-             keytool -genkey -alias james -keyalg RSA -keystore /path/to/james/conf/keystore</dd>
+             keytool -genkey -alias james -keyalg RSA -keystore /path/to/james/conf/keystore<br/>
+            Please note that each POP3 server exposed on different port can specify its own keystore, independently from any other
+            TLS based protocols.</dd>
         <dt><strong>handler.helloName</strong></dt>
         <dd>This is the name used by the server to identify itself in the POP3 
         protocol.  If autodetect is TRUE, the server will discover its 

http://git-wip-us.apache.org/repos/asf/james-project/blob/26df561f/src/site/xdoc/server/config-smtp-lmtp.xml
----------------------------------------------------------------------
diff --git a/src/site/xdoc/server/config-smtp-lmtp.xml b/src/site/xdoc/server/config-smtp-lmtp.xml
index 3cf36cc..62037f5 100644
--- a/src/site/xdoc/server/config-smtp-lmtp.xml
+++ b/src/site/xdoc/server/config-smtp-lmtp.xml
@@ -61,7 +61,9 @@
       <dd>Set to true to support STARTTLS or SSL for the Socket.
          To use this you need to copy sunjce_provider.jar to /path/james/lib directory. To create a new keystore execute:
         keytool -genkey -alias james -keyalg RSA -keystore /path/to/james/conf/keystore. The algorithm is optional and only needs to be specified when using something other
-        than the Sun JCE provider - You could use IbmX509 with IBM Java runtime.</dd>
+        than the Sun JCE provider - You could use IbmX509 with IBM Java runtime.<br/>
+          Please note that each SMTP/LMTP server exposed on different port can specify its own keystore, independently from any other
+          TLS based protocols.</dd>
       <dt><strong>handler.helloName</strong></dt>
       <dd>This is a required tag with an optional body that defines the server name 
       used in the initial service greeting.  The tag may have an optional attribute - <strong>autodetect</strong>.  If 

http://git-wip-us.apache.org/repos/asf/james-project/blob/26df561f/src/site/xdoc/server/feature-protocols.xml
----------------------------------------------------------------------
diff --git a/src/site/xdoc/server/feature-protocols.xml b/src/site/xdoc/server/feature-protocols.xml
index db708d9..5ceb05a 100644
--- a/src/site/xdoc/server/feature-protocols.xml
+++ b/src/site/xdoc/server/feature-protocols.xml
@@ -41,6 +41,8 @@
       
       <p>The Apache James Server is implemented as a complete collection of servers and related components that, taken together,
       provide an email solution.  These components are described below.</p>
+
+      <p>Note that each protocol can specify its TLS settings and keys in an independent way.</p>
   
     </subsection>
     


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org