[ILUG] tls or no tls

[Brendan Kehoe]

I've got courier-imap and courier-imap-ssl installed on my Ubuntu
system.  Currently the port 143 version, courier-imap, is configured to
only listen on 127.0.0.1 since it's used by my installation of the
Horde+IMP webmail interface via the setting

          $conf['auth']['params']['dsn'] = '{localhost:143/imap/notls}';

So anyone wanting to access their mail via IMAP need to use port 993,
which does SSL with courier-imap-ssl.

But since I do contract programming I'm sometimes in places where their
firewall blocks port 993.  But sometimes not port 143.  So it'd be
really handy if I could direct Thunderbird to go to port 143 and just do
STARTTLS first.

The catch is that I can't seem to get horde to be willing to deal with
the TLS being turned on.  I tried

          $conf['auth']['params']['dsn'] =
'{localhost:143/imap/tls/novalidate-cert}';

but login attempts failed.  Nothing helpful appeared in the horde3 log.

Have any of you tried to configure the courier imapd to actually run two
instances, one listening to port 127.0.0.1 not requiring STARTTLS, and
another listening for external connections (ADDRESS=0) which does?

B