Mail and SSL

The mail stuff is done. Horray!

• POP3 supports SSL/TLS on the POP3S port, 995
• IMAP supports SSL/TLS on the IMAPS port, 993
• SMTP supports SSL/TLS as an option on the SUBMISSION port, 587. If your ISP is blocking port 25, you can use port 587 to send mail, if you're authenticated (SMTP with username/password).
• SMTP also supports a fulltime wrapped port on port 465 (some older apps will want this).
• SMTP lastly will still honor STARTTLS on the standard SMTP port.
• SMTP AUTH is working after the upgrades. I still need to provide a password change tool. Until I do so, poke me directly.

SSL should "just work" as long as you use the name mail.gigo.com. We're using a paid-for certificate that should have root trusts. I tested Thunderbird and Mail.App (apple), and they worked. I also got pine working (with these instructions).

For those who are curious, the new combination of software on the server is now: OpenSSL, Dovecot POP3/IMAP, Postfix (with Dovecot SMTP AUTH), Squirrelmail, and Apache with SSL. Filtering is provided by both Dovecot LDA + libsieve, and via procmail, depending on user preferences.