centos – KutuKupret

vmware ESXi 4 + centos 5.3 guest OS + zimbra

Sep 252009

I’ve been playing around with Zimbra opensource edition on my development server. Zimbra is a full-featured, open source collaboration suite for email, group calendaring, contacts, and web document management and authoring. web interface is equipped with AJAX and it is compatible with clients such as Outlook, Apple Mail, and Novell Evolution so that mail, contacts, and calendar items can be synchronised from these to the ZCS server. It also can be synchronized to many mobile devices. ZCS makes use of many existing open source projects such as Postfix, MySQL, and OpenLDAP.

In this experiment i was using Zimbra 64bit_x86 opensource edition

DNs setting

mail.domain.tld.        A    192.168.1.2
domain.tld.             MX   10    mail.domain.tld.

Download the installer

# wget http://h.yimg.com/lo/downloads/6.0.1_GA/zcs-6.0.1_GA_1816.RHEL5_64.20090911174852.tgz

Extract the installer tarball, make sure we have enough space.

# tar xvzf  6.0.1_GA/zcs-6.0.1_GA_1816.RHEL5_64.20090911174852.tgz
# cd zcs-6.0.1_GA_1816.RHEL5_64.20090911174852

Securing MySQL traffic with stunnel

centos, mysql, ssl, tunnel No Responses »

Sep 202009

To encrypt a connection between a mysql client and a mysql server, run two instances of stunnel, one on client site and other on MySQL remote site

Here’s steps how to do it

# wget http://www.stunnel.org/download/stunnel/src/stunnel-4.27.tar.gz
# rpmbuild -ta stunnel-4.27.tar.gz
# rpm -ivh /usr/src/redhat/RPMS/stunnel-4.27-1.i386.rpm

Create stunnel.pem cert on server site

# openssl genrsa -out privkey.pem 2048
# openssl req -new -x509 -key privkey.pem -out cacert.pem -days 1095
# cat privkey.pem cacert.pem >> /etc/stunnel/stunnel.pem

Set the proper permissions on the resulting private key:

# chmod 0400 /etc/stunnel/stunnel.pem

Set the proper ownership of the stunnel chroot dir

# chown nobody:nobody /var/run/stunnel

Page 1 of 6 1 2 3 … 5 6 Older Entries