SSL сертификаты

openssl req -new -newkey rsa:2048 -x509 -nodes -keyout cakey.pem -out cacert.pem -days 3650
openssl req -new -newkey rsa:1024 -nodes -keyout smtpd.key -out smtpd.csr
openssl x509 -req -CA cacert.pem -CAkey cakey.pem -days 730 -in smtpd.csr -out smtpd.crt -CAcreateserial 

smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_CApath = /etc/ssl/cert

[ CA_default ]
dir               = ./demoCA              
certs           = $dir/certs            
crl_dir         = $dir/crl               
database    = $dir/index.txt        
 
new_certs_dir   = $dir/newcerts         
certificate     = $dir/cacert.pem       
serial            = $dir/serial            
crlnumber     = $dir/crlnumber         
crl                 = $dir/crl.pem           
private_key  = $dir/private/cakey.pem 
RANDFILE      = $dir/private/.rand     
x509_extensions = usr_cert              
 
name_opt     = ca_default             
cert_opt        = ca_default            
default_days    = 365                   
default_crl_days= 30                    
default_md      = sha1                  
preserve        = no                    
 
policy          = policy_match

Sep 10 12:39:49 srv2 postfix/master[5179]: daemon started -- version 2.7.0, configuration /etc/postfix
Sep 10 12:43:00 srv2 postfix/smtpd[5215]: connect from unknown[ip]
Sep 10 12:43:00 srv2 postfix/smtpd[5215]: setting up TLS connection from unknown[ip]
Sep 10 12:43:00 srv2 postfix/smtpd[5215]: Anonymous TLS connection established from unknown[ip]: TLSv1 with cipher AES128-SHA (128/128 bits)
Sep 10 12:43:00 srv2 postfix/smtpd[5215]: 9B62C40E0918: client=unknown[ip], sasl_method=LOGIN, sasl_username=test@domain.ru
Sep 10 12:43:00 srv2 postfix/cleanup[5220]: 9B62C40E0918: message-id=<>
Sep 10 12:43:00 srv2 postfix/qmgr[5182]: 9B62C40E0918: from=<test@domain.ru>, size=816, nrcpt=1 (queue active)
Sep 10 12:43:00 srv2 postfix/smtpd[5215]: disconnect from unknown[ip]
Sep 10 12:43:00 srv2 postfix/pipe[5221]: 9B62C40E0918: to=<test@domain.ru>, relay=dovecot, delay=0.22, delays=0.1/0/0/0.11, dsn=2.0.0, status=sent (delivered via dovecot service).
Sep 10 12:43:00 srv2 postfix/qmgr[5182]: 9B62C40E0918: removed

smtp      inet  n       -       -       -       -       smtpd
submission inet n       -       -       -       -       smtpd
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o milter_macro_daemon_name=ORIGINATING
  -o cleanup_service_name=sasl_cleanup
587     inet    n       -       y       -       -       smtpd
#  -o smtpd_tls_security_level=encrypt
#  -o smtpd_tls_wrappermode=yes
#  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
#  -o cleanup_service_name=sasl_cleanup
smtps     inet  n       -       -       -       -       smtpd
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o milter_macro_daemon_name=ORIGINATING

#base_dir = /var/run/dovecot
protocols = imap imaps
disable_plaintext_auth = no
shutdown_clients = yes
log_path = /var/log/dovecot
info_log_path = /var/log/dovecot.info
auth_debug = yes
mail_debug=yes
log_timestamp = "%Y-%m-%d %H:%M:%S "
#ssl_disable = yes
## SSL settings
ssl_cert_file = /etc/dovecot/ssl/imapd.pem
ssl_key_file = /etc/dovecot/ssl/imapd.pem
ssl_ca_file = /etc/dovecot/ssl/imapd.pem
login_dir = /var/run/dovecot/login
login_chroot = yes
login_user = dovecot
login_greeting = Dovecot ready.
mail_location = maildir:/home/vmail/%d/%n
mmap_disable = no
valid_chroot_dirs = /var/spool/vmail
protocol imap {
login_executable = /usr/lib/dovecot/imap-login
mail_executable = /usr/lib/dovecot/imap
}
protocol imap {
  mail_plugins = autocreate
}
plugin {
  autocreate = INBOX.Sent
  autocreate2 = INBOX.Deleted
  autocreate3 = INBOX.Spam
  autocreate4 = INBOX.Junk Mail
  autosubscribe = INBOX.Sent
  autosubscribe2 = INBOX.Deleted
  autosubscribe3 = INBOX.Spam
  autosubscribe4 = INBOX.Junk Mail
}
#protocol pop3 {
#login_executable = /usr/lib/dovecot/pop3-login
#mail_executable = /usr/lib/dovecot/pop3
#pop3_uidl_format = %08Xu%08Xv
#}
protocol lda {
log_path = /home/vmail/dovecot-deliver.log
auth_socket_path = /var/run/dovecot/auth-master
postmaster_address = test@rosmicrofinans.ru
mail_plugins = sieve
global_script_path = /home/vmail/globalsieverc
}
auth_executable = /usr/lib/dovecot/dovecot-auth
auth_verbose = yes
namespace private {
separator = .
prefix = INBOX.
inbox = yes
}
auth default {
mechanisms = plain login
passdb sql {
args = /etc/dovecot/dovecot-sql.conf
}
userdb static {
args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes
}
user = root
socket listen {
master {
path = /var/run/dovecot/auth-master
mode = 0600
user = vmail
}
client {
path = /var/spool/postfix/private/auth
mode = 0660
user = postfix
group = postfix
}
}
}

2012-09-10 12:49:43 dovecot: Warning: Killed with signal 15 (by pid=5263 uid=0 code=kill)
2012-09-10 12:50:28 dovecot: Warning: Killed with signal 15 (by pid=5296 uid=0 code=kill)

2012-09-10 13:00:21 IMAP(test2@rosmicrofinans.ru): Info: Module loaded: /usr/lib/dovecot/modules/imap/lib20_autocreate_plugin.so
2012-09-10 13:00:21 IMAP(test2@rosmicrofinans.ru): Info: Effective uid=5000, gid=5000, home=/home/vmail/domain.ru/test2
2012-09-10 13:00:21 IMAP(test2@rosmicrofinans.ru): Info: Namespace: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes
2012-09-10 13:00:21 IMAP(test2@rosmicrofinans.ru): Info: maildir: data=/home/vmail/domain.ru/test2
2012-09-10 13:00:21 IMAP(test2@rosmicrofinans.ru): Info: maildir++: root=/home/vmail/domain.ru/test2, index=, control=, inbox=/home/vmail/domain.ru/test2
2012-09-10 13:00:21 IMAP(test2@rosmicrofinans.ru): Info: Namespace INBOX.: Using permissions from /home/vmail/domain.ru/test2: mode=0700 gid=-1
2012-09-10 13:00:22 auth(default): Info: new auth connection: pid=5375
2012-09-10 13:00:22 auth(default): Info: new auth connection: pid=5376
2012-09-10 13:01:02 IMAP(test2@rosmicrofinans.ru): Info: Disconnected: Logged out bytes=423/3003
2012-09-10 13:01:02 IMAP(test2@rosmicrofinans.ru): Info: Disconnected: Logged out bytes=63/577

openssl req -new -nodes -x509 -out imapd.pem -keyout imapd.pem -days 3650

dovecot   unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail:mail argv=/usr/lib/dovecot/deliver -d ${recipient}