Arch Linux

lustikus

Member

Registered: 2009-11-10

Posts: 262

offlineimap ssl security

I use offlineimap to sync my imap mailserver. I generated my own ssl certificate for the ssl connection with openssl on my mailserver.
I have a mail.crt file as the public key and a mail.key file as my secret key.

To my understanding an app should only need the .crt file for a ssl connection, but I also had to copy my .key file to my machine and set it in the config.

I set this in my .offlineimaprc:

sslclientcert = /etc/ssl/certs/mail.crt
sslclientkey = /etc/ssl/private/mail.key

I does not work without the .key file, but I don't understand why, and isn't this quite unsecure?