roundcube custom tls verification options - Users

9 Apr 2018


      Hello,
Is it possible to do custom connection information? This is how my
config.inc.php file looks:
$config['default_host'] = 'tls://localhost';
$config['imap_conn_options'] = array(
'ssl' => array(
'verify_peer' => false,
'verify_peer_name' => false,
),
);
$config['smtp_server'] = 'tls://localhost';
$config['smtp_conn_options'] = array(
 'ssl' => array(
 'verify_peer' => false,
'verify_peer_name' => false,
 ),
);
$config['include_host_config'] = array(
'webmail.domain1.com' => 'domain1_config.inc.php',
'webmail.domain2.com' => 'domain2_config.inc.php',
);
what I'm wanting to do is tighten my tls verification options. My
domains each use a different letsencrypt certificate. What I'm wanting
to add is something like:
// For STARTTLS IMAP
 $config['imap_conn_options'] = array(
     'ssl' => array(
       'verify_peer'       => true,
       // certificate is not self-signed if cafile provided
       'allow_self_signed' => false,
//        'cafile'  => '/etc/ssl/certs/Your_CA_certificate.pem',
       // For Letsencrypt use the following two lines and remove the
'cafile' option above.
'ssl_cert => '/etc/letsencrypt/live/mail.my_domain.org/fullchain.pem'
'ssl_key'  => '/etc/letsencrypt/live/mail.my_domain.org/privkey.pem'
       // probably optional parameters
       'ciphers' => 'TLSv1+HIGH:!aNull:@STRENGTH',
       'peer_name'         => 'mail.my_domain.org',
     ),
 );
 // For STARTTLS SMTP
 $config['smtp_conn_options'] = array(
     'ssl' => array(
       'verify_peer'       => true,
       // certificate is not self-signed if cafile provided
       'allow_self_signed' => false,
//        'cafile'  => '/etc/ssl/certs/Your_CA_certificate.pem',
       // For Letsencrypt use the following two lines and remove the
'cafile' option above.
'ssl_cert => '/etc/letsencrypt/live/mail.my_domain.org/fullchain.pem'
'ssl_key'  => '/etc/letsencrypt/live/mail.my_domain.org/privkey.pem'
       // probably optional parameters
       'ciphers' => 'TLSv1+HIGH:!aNull:@STRENGTH',
       'peer_name'         => 'mail.my_domain.org',
     ),
 );
Can I put a config in each of the domain specific files?
Thanks.
Dave.