|
@@ -5684,7 +5684,7 @@ function configure_imap_client_certs {
|
5684
|
5684
|
fi
|
5685
|
5685
|
# make a CA cert
|
5686
|
5686
|
if [ ! -f /etc/ssl/private/dovecot-ca.key ]; then
|
5687
|
|
- freedombone-addcert -h dovecot-ca --ca
|
|
5687
|
+ freedombone-addcert -h dovecot-ca --ca
|
5688
|
5688
|
fi
|
5689
|
5689
|
# CA configuration
|
5690
|
5690
|
echo '[ ca ]' > /etc/ssl/dovecot-ca.cnf
|
|
@@ -5720,6 +5720,12 @@ function configure_imap_client_certs {
|
5720
|
5720
|
echo 'authorityKeyIdentifier = keyid:always' >> /etc/ssl/dovecot-ca.cnf
|
5721
|
5721
|
echo 'keyUsage = digitalSignature,keyEncipherment' >> /etc/ssl/dovecot-ca.cnf
|
5722
|
5722
|
echo 'extendedKeyUsage = clientAuth' >> /etc/ssl/dovecot-ca.cnf
|
|
5723
|
+ if [ -f /etc/ssl/ssldb ]; then
|
|
5724
|
+ rm /etc/ssl/ssldb
|
|
5725
|
+ fi
|
|
5726
|
+ if [ -f /etc/ssl/sslserial ]; then
|
|
5727
|
+ rm /etc/ssl/sslserial
|
|
5728
|
+ fi
|
5723
|
5729
|
touch /etc/ssl/ssldb
|
5724
|
5730
|
echo 0001 > /etc/ssl/sslserial
|
5725
|
5731
|
#freedombone-clientcert -u $MY_USERNAME
|