Kolab 3.0 questions about certificate generation and tls

[Dirk Werner]

On 08/21/2012 02:38 PM, Dirk Werner wrote:
> Hi,
>
> where can I set the parameters about connection security in Kolab 3.0? I
> haven't seen an entry like that in kolab-webadmin, Kolab 2.3.4 has a
> settings page for that, to e.g. enable TLS and other.
>
> Another question is about certificate generation:
>
> the Community Installlation guide says about cert generation:
>
> If you don't have certificates, you can generate them using:
> Todo: -use pykolab to generate the certificates? -install package with
> the /usr/share/kolab/scripts/kolab_ca.sh scripts -generate and install
> cert use /etc/pki/tls/certs/Makefile from package openssl to generate
> certificates?
>
> Pykolab is installed but the file kolab_ca.sh does not exist. Here's the
> list of installed packages, am I missing something?
>
>
> yum list installed | grep kolab
>
> cyrus-imapd.x86_64                 2.4.16-1.el6.kolab_3.0
> @kolab-3.0-development
> cyrus-imapd-perl.x86_64            2.4.16-1.el6.kolab_3.0
> @kolab-3.0-development
> cyrus-imapd-utils.x86_64           2.4.16-1.el6.kolab_3.0
> @kolab-3.0-development
> kolab.noarch                       3.0.0-1.el6.kolab_3.0 
> @kolab-3.0-development
> kolab-3.0-community-release.noarch 6-2.el6.kolab_3.0     
> installed            
> kolab-3.0-community-release-development.noarch
>                                    6-2.el6.kolab_3.0     
> installed            
> kolab-cli.noarch                   0.5.3-1.el6.kolab_3.0 
> @kolab-3.0-development
> kolab-conf.noarch                  3.0-1.el6.kolab_3.0   
> @kolab-3.0-development
> kolab-imap.noarch                  3.0-1.el6.kolab_3.0   
> @kolab-3.0-development
> kolab-ldap.noarch                  3.0-1.el6.kolab_3.0   
> @kolab-3.0-development
> kolab-mta.noarch                   3.0-3.el6.kolab_3.0   
> @kolab-3.0-development
> kolab-saslauthd.noarch             0.5.3-1.el6.kolab_3.0 
> @kolab-3.0-development
> kolab-schema.noarch                3.0-0.1.el6.kolab_3.0 
> @kolab-3.0-development
> kolab-server.noarch                0.5.3-1.el6.kolab_3.0 
> @kolab-3.0-development
> kolab-syncroton.noarch             0.1-0.2.el6.kolab_3.0 
> @kolab-3.0-development
> kolab-utils.x86_64                 3.0.2-1.el6.kolab_3.0 
> @kolab-3.0-development
> kolab-webadmin.noarch              3.0.0-1.el6.kolab_3.0 
> @kolab-3.0-development
> kolab-webclient.noarch             3.0-2.el6.kolab_3.0   
> @kolab-3.0-development
> libcalendaring.x86_64              4.9.0-1.el6.kolab_3.0 
> @kolab-3.0-development
> libkolab.x86_64                    0.3.1-3.el6.kolab_3.0 
> @kolab-3.0-development
> libkolabxml.x86_64                 0.8.1-1.el6.kolab_3.0 
> @kolab-3.0-development
> mozldap.x86_64                     6.0.5-8.el6.kolab_2.4 
> @kolab-3.0-development
> mozldap-tools.x86_64               6.0.5-8.el6.kolab_2.4 
> @kolab-3.0-development
> php.x86_64                         5.3.10-4.el6.kolab_3.0
> @kolab-3.0-development
> php-Smarty.noarch                  3.1.7-1.el6.kolab_3.0 
> @kolab-3.0-development
> php-bcmath.x86_64                  5.3.10-4.el6.kolab_3.0
> @kolab-3.0-development
> php-cli.x86_64                     5.3.10-4.el6.kolab_3.0
> @kolab-3.0-development
> php-common.x86_64                  5.3.10-4.el6.kolab_3.0
> @kolab-3.0-development
> php-kolabformat.x86_64             0.8.1-1.el6.kolab_3.0 
> @kolab-3.0-development
> php-ldap.x86_64                    5.3.10-4.el6.kolab_3.0
> @kolab-3.0-development
> php-mbstring.x86_64                5.3.10-4.el6.kolab_3.0
> @kolab-3.0-development
> php-mcrypt.x86_64                  5.3.10-4.el6.kolab_3.0
> @kolab-3.0-development
> php-mysql.x86_64                   5.3.10-4.el6.kolab_3.0
> @kolab-3.0-development
> php-pdo.x86_64                     5.3.10-4.el6.kolab_3.0
> @kolab-3.0-development
> php-pear-Net-LDAP2.noarch          2.0.9-3.el6.kolab_3.0 
> @kolab-3.0-development
> php-process.x86_64                 5.3.10-4.el6.kolab_3.0
> @kolab-3.0-development
> php-xml.x86_64                     5.3.10-4.el6.kolab_3.0
> @kolab-3.0-development
> postfix-kolab.noarch               0.5.3-1.el6.kolab_3.0 
> @kolab-3.0-development
> pykolab.noarch                     0.5.3-1.el6.kolab_3.0 
> @kolab-3.0-development
> pykolab-xml.noarch                 0.5.3-1.el6.kolab_3.0 
> @kolab-3.0-development
> python-icalendar.noarch            3.0.1-0.3.beta2.el6.kolab_3.0
>                                                          
> @kolab-3.0-development
> python-kolabformat.x86_64          0.8.1-1.el6.kolab_3.0 
> @kolab-3.0-development
> python-ldap.x86_64                 2.4.6-2.el6.kolab_3.0 
> @kolab-3.0-development
> python-pyasn1.noarch               0.1.2-1.el6.kolab_3.0 
> @kolab-3.0-development
> python-pyasn1-modules.noarch       0.1.2-1.el6.kolab_3.0 
> @kolab-3.0-development
> roundcubemail.noarch               0.9-0.9.git7213d91b.el6.kolab_3.0
>                                                          
> @kolab-3.0-development
> roundcubemail-plugins-kolab.noarch
> 3.0-0.22.git20120805.5924c8dc.el6.kolab_3.0
>                                                          
> @kolab-3.0-development
> wallace.noarch                     0.5.3-1.el6.kolab_3.0 
> @kolab-3.0-development
>
>
> Best regards
> Dirk
I have done now what the manual actually says and generated the
necessary keys and certs using the Makefile in /etc/pki/tls/certs. Don't
know why I didn't just do that ..