Changeset 539

Timestamp:

05/17/08 12:25:56 (7 months ago)

Author:

free

Message:

* Use squirrelmail via SSL

Location:

cdd-utils/trunk

Files:

• debian/README.ares (modified) (2 diffs)
• debian/README.eros (modified) (1 diff)
• debian/changelog (modified) (1 diff)
• lib/server.sh (modified) (1 diff)
• lib/suites.sh (modified) (1 diff)

cdd-utils/trunk/debian/README.ares

@@ -12 +12 @@
    dpkg-reconfigure tzdata
 
-3) Set the manager password of both webmin and LDAP
+3) Set the password of the webmin manager account and also
+   of the regular LDAP one
 
 4) Set the squid local network to the value choosen in 1)
@@ -27 +28 @@
 9) Configure monit mail
 
+10) Genereate a SSL certificate
+
+    make-ssl-cert /usr/share/ssl-cert/ssleay.cnf  /etc/apache2/apache.pem
+
+11) Configure squirrelmail with the correct site name, by
+    running cdd-config squirrelmail sitename
+
 And finally reboot the machine, as all services have to be restarted.

cdd-utils/trunk/debian/README.eros

@@ -1 @@
-1) Set a dchp network interface
+1) Set a dchp network interface (not needed if the machine was
+   connected to are during the installation)

cdd-utils/trunk/debian/changelog

@@ -16 +16 @@
   * Support custom gdm theme
   * Remove cdrom APT sources
+  * Use squirrelmail via SSL
 
  -- Free Ekanayaka <free@64studio.com>  Thu, 08 May 2008 21:55:32 +0200

cdd-utils/trunk/lib/server.sh

@@ -134 +134 @@
 }
 
+# Secure server layer
+ssl () {
+
+    # Enable SSL in apache
+    cfg=../mods-available/ssl.conf
+    lnk=/etc/apache2/mods-enabled/ssl.conf
+    if ! exists $lnk; then ln -sf $cfg $lnk; fi
+
+    cfg=../mods-available/ssl.load
+    lnk=/etc/apache2/mods-enabled/ssl.load
+    if ! exists $lnk; then ln -sf $cfg $lnk; fi
+
+}
 
 # Squirrelmail
 squirrelmail () {
-    cfg=/etc/squirrelmail/apache.conf
-    lnk=/etc/apache2/conf.d/squirrelmail.conf
-    if ! exists $cfg; then warning $cfg not found; return; fi
-    if ! exists $lnk; then ln -sf $cfg $lnk; fi
+    sitename=$1 # Name of the site on the internet, like mail.foo.com
+    if nullstr $sitename; then warning "No site name given"; return; fi
+
+    # Configure a virtual host for squirrelmail
+    cfg=/etc/apache2/conf.d/squirrelmail.conf
+
+    # Upgrade from previous versions
+    if [ -L $cfg ]; then
+        rm $cfg
+    fi
+
+    cat <<EOF > $cfg
+<VirtualHost *>
+  DocumentRoot /usr/share/squirrelmail
+  ServerName $sitename
+  SSLEngine on
+  SSLCertificateFile /etc/apache2/apache.pem
+</VirtualHost>
+EOF
 
 }

cdd-utils/trunk/lib/suites.sh

@@ -16 +16 @@
     cdd-config postfix
     cdd-config fetchmail
-    cdd-config squirrelmail
+    cdd-config squirrelmail ares
     cdd-config samba
     cdd-config webmin