diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2014-07-02 17:54:24 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2015-06-07 02:52:15 +0200 |
| commit | 7a5cc5032b036f110a19b899cfc264065b473ed1 (patch) | |
| tree | e3b0960dea5ee0203dda36013adf2fcaba4c8a8f /roles/IMAP-proxy/handlers | |
| parent | 7becb5c762df5089bb0c4ff5a7f2fb026379fcb3 (diff) | |
Use stunnel to secure the connection from the IMAP proxy to the IMAP server.
The reason is that we don't want to rely on CAs to verify the
certificate of our server. Dovecot currently doesn't offer a way to
match said cert against a local copy or known fingerprint. stunnel
does.
Diffstat (limited to 'roles/IMAP-proxy/handlers')
| -rw-r--r-- | roles/IMAP-proxy/handlers/main.yml | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/roles/IMAP-proxy/handlers/main.yml b/roles/IMAP-proxy/handlers/main.yml index 45f817d..5249a7e 100644 --- a/roles/IMAP-proxy/handlers/main.yml +++ b/roles/IMAP-proxy/handlers/main.yml @@ -1,3 +1,6 @@ --- +- name: Restart stunnel + service: name=stunnel4 pattern=/usr/bin/stunnel4 state=restarted + - name: Restart Dovecot service: name=dovecot state=restarted |