IMAP/SSL in mutt 
================

¥³¥ó¥Ñ¥¤¥ë
-----------
Mutt ¤Ç SSL ¤ò»È¤¤¤¿¤¤¤Î¤Ç¤¢¤ì¤Ð¡¢Mutt ¤ò¥³¥ó¥Ñ¥¤¥ë¤¹¤ëÁ°¤Ë OpenSSL
¡Êhttp://www.openssl.org¡Ë¤Î¥é¥¤¥Ö¥é¥ê¤È¥Ø¥Ã¥À¤ò¥¤¥ó¥¹¥È¡¼¥ë¤¹¤ëɬÍפ¬
¤¢¤ê¤Þ¤¹¡£OpenSSL ¥Ð¡¼¥¸¥ç¥ó 0.9.3 ¤«¤é 0.9.6a ¤Þ¤Ç¤¬»î¸³¤µ¤ì¤Æ¤¤¤Þ¤¹¡£

SSL ¥µ¥Ý¡¼¥È¤òÍ­¸ú¤Ë¤¹¤ë¤¿¤á¤Ë¤Ï¡¢¡Ö--enable-imap --with-ssl[=PFX]¡×¥Ñ
¥é¥á¡¼¥¿¤òÉÕ¤±¤Æ configure ¥¹¥¯¥ê¥×¥È¤ò¼Â¹Ô¤¹¤ëɬÍפ¬¤¢¤ê¤Þ¤¹¡£
OpenSSL ¤Î¥Ø¥Ã¥À¤È¥é¥¤¥Ö¥é¥ê¤¬¥Ç¥Õ¥©¥ë¥È¤Î¥·¥¹¥Æ¥à¡¦¥µ¡¼¥Á¥Ñ¥¹¡ÊÄ̾ï¤Ï
/usr/include ¤È /usr/lib¡Ë¤Ë¤Ê¤¤¾ì¹ç¤Ë¤Ï¡¢¥ª¥×¥·¥ç¥ó¤Î PFX °ú¿ô¤ò»È¤Ã
¤Æ OpenSSL ¤¬¥¤¥ó¥¹¥È¡¼¥ë¤µ¤ì¤Æ¤¤¤ë¥ë¡¼¥È¥Ç¥£¥ì¥¯¥È¥ê¤ò»ØÄꤹ¤ë¤³¤È¤¬
¤Ç¤­¤Þ¤¹¡£¤³¤Î¤È¤­¤Ï¡¢¥é¥¤¥Ö¥é¥ê¡¼¤Ï PFX/lib ¤Ç¡¢¥Ø¥Ã¥À¤Ï
PFX/include/openssl ¤Ç¸«¤Ä¤±¤é¤ì¤ë¤³¤È¤¬Ë¾¤Þ¤ì¤Þ¤¹¡£


»È¤¤Êý
------
IMAP/SSL ¥Õ¥©¥ë¥À¤Ë¤ÏÉáÄ̤ΠIMAP ¥Õ¥©¥ë¥À¤Î¤è¤¦¤Ë¥¢¥¯¥»¥¹¤Ç¤­¤Þ¤¹¡£¤·
¤«¤·¡¢³ç¸Ì¤òÊĤ¸¤ëÁ°¤Ë '/ssl' ¤ò²Ã¤¨¤ëɬÍפ¬¤¢¤ê¤Þ¤¹¡£¤¢¤ë¤¤¤Ï¡¢IMAP 
urlµ­Ë¡¤ò»È¤¦¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£¤³¤Î¾ì¹ç¤Ë¤Ï¥×¥í¥È¥³¥ë̾¤Ï imaps ¤È¸Æ¤Ð¤ì
¤Þ¤¹¡£

Îã:
	mailboxes {localhost/ssl}inbox
	mailboxes {localhost:994/ssl}inbox
¤¢¤ë¤¤¤Ï
	mailboxes imaps://localhost/inbox
	mailboxes imaps://localhost:994/inbox

¥¨¥ó¥È¥í¥ÔÉÔ­¤Ç¥¨¥é¡¼¤¬À¸¤¸¤¿¤é¡¢SSL ¥é¥¤¥Ö¥é¥ê¤ò½é´ü²½¤¹¤ë¤¿¤á¤ÎÍð¿ô
¥Ç¡¼¥¿¤Î¸»¤ò¸«¤Ä¤±¤ë¤³¤È¤¬¤Ç¤­¤Ê¤«¤Ã¤¿¤³¤È¤ò°ÕÌ£¤·¤Þ¤¹¡£¤³¤Î¤³¤È¤¬À¸¤¸
¤¿¤é¡¢¤¢¤Ê¤¿¼«¿È¤Ç¥Ç¡¼¥¿¤òÀ¸À®¤·¡¢$entropy_file ¤ä ´Ä¶­ÊÑ¿ô $RANDFILE
¤Ç¼¨¤µ¤ì¤¿¥Õ¥¡¥¤¥ë¤« ~/.rnd ¤Ë¤½¤Î¥Ç¡¼¥¿¤òÊݸ¤¹¤ëɬÍפ¬¤¢¤ê¤Þ¤¹¡£

Íð¿ô¥Ç¡¼¥¿¤òÀ¸À®¤¹¤ë°ì¤Ä¤ÎÊýË¡¤Ïͽ¬ÉÔǽ¤Ê½ÐÎϤòÆÀ¤ë¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ë
¤³¤È¤Ç¤¹¡£Î㤨¤Ð¡¢Linux ¤Ë¤ª¤¤¤Æ¤Ï 'ps aluxww' ¤ò¼Â¹Ô¤·¤Þ¤¹¡£¤½¤·¤Æ¡¢
¤½¤Î½ÐÎϤ«¤é MD5-sum ¤ò·×»»¤·¡¢¤½¤Î·ë²Ì¤ò¥Õ¥¡¥¤¥ë¤ËÊݸ¤·¤Þ¤¹¡£

** Ãíµ­: ´Ä¶­ÊÑ¿ô $RANDFILE ¤Ç¼¨¤µ¤ì¤¿¥Õ¥¡¥¤¥ë (´Ä¶­ÊÑ¿ô¤¬ÀßÄꤵ¤ì¤Æ
** ¤¤¤Ê¤±¤ì¤Ð ~/.rnd) ¤ÎÆâÍÆ¤Ï Mutt ¤¬µ¯Æ°¤¹¤ëÅ٤˾å½ñ¤­¤µ¤ì¤Þ¤¹¡£
** ¤½¤Î¤¿¤á¡¢¤½¤Î¥Õ¥¡¥¤¥ë¤Ë¤Ï¼º¤Ã¤Æº¹¤·»Ù¤¨¤¢¤ë¤â¤Î¤Ï²¿¤âÃÖ¤«¤Ê¤¤¤è¤¦
** ¤Ë¤·¤Æ¤¯¤À¤µ¤¤¡£

Mutt ¤¬ SSL ¥é¥¤¥Ö¥é¥ê¤ò½é´ü²½¤¹¤ë¤¿¤á¤Ë»È¤¦¤³¤È¤ò»î¤¹¥Õ¥¡¥¤¥ë¤Ï
$entropy_file ¤È $RANDFILE (ÀßÄꤵ¤ì¤Æ¤¤¤Ê¤±¤ì¤Ð ~/.rnd) ¤Ç¤¹¡£
OpenSSL ¤¬¥Ð¡¼¥¸¥ç¥ó 0.9.5 °Ê¾å¤Ç¤¢¤ì¤Ð¡¢¾å½Ò¤Î¥Õ¥¡¥¤¥ë¤Ë¤Ï EGD ¥½¥±¥Ã
¥È¡ÊEntropy Gathering Daemon ¤Ë´Ø¤¹¤ë¹¹¤Ê¤ë¾ðÊó¤Ï
http://www.lothar.com/tech/crypto/ ¤ò»²¾È¤Î¤³¤È¡Ë¤â´Þ¤Þ¤ì¡¢¤µ¤é¤Ë¡¢°Ê
²¼¤Ë½Ò¤Ù¤ë¥½¥±¥Ã¥È¤¬»î¤µ¤ì¤Þ¤¹¡£¤³¤ì¤Ï´Ä¶­ÊÑ¿ô $EGDSOCKET ¤È ~/.entropy 
¤È /tmp/entropy ¤Ç¼¨¤µ¤ì¤ë¥½¥±¥Ã¥È¤Ç¤¹¡£

¾å½Ò¤·¤¿Á´¤Æ¤Î¥Õ¥¡¥¤¥ë¤È¥½¥±¥Ã¥È¤Ï¤½¤Î¥æ¡¼¥¶¤Î½êÍ­¤Ç¥Ñ¡¼¥ß¥Ã¥·¥ç¥ó¤Ï
600¤Ç¤Ê¤±¤ì¤Ð¤Ê¤ê¤Þ¤»¤ó¡£


¾ÚÌÀ½ñ
------
¥µ¡¼¥Ð¤¬Àܳ¤µ¤ì¤ë¤¿¤Ó¤Ë¡¢¥µ¡¼¥Ð¤Î¾ÚÌÀ½ñ¤Ï´ûÃΤÎÍ­¸ú¤Ê¾ÚÌÀ½ñ¤ËÂФ·¤ÆÀµ
¤·¤¤¤«³Îǧ¤µ¤ì¤Þ¤¹¡£Ì¤ÃΤξÚÌÀ½ñ¤Ë½Ð²ñ¤Ã¤¿¤é¡¢¤½¤Î¾ÚÌÀ½ñ¤ò¸¡¾Ú¤¹¤ë¤è¤¦
¤Ë¿Ò¤Í¤é¤ì¤Þ¤¹¡£¤½¤Î¾ÚÌÀ½ñ¤òµñÈݤ·¤¿¾ì¹ç¤Ï¡¢¤¹¤°¤ËÀܳ¤¬½ªÎ»¤·¤Þ¤¹¡£¾Ú
ÌÀ½ñ¤ò¼õÂú¤·¤¿¾ì¹ç¤Ï¡¢Àܳ¤¬³ÎΩ¤µ¤ì¤Þ¤¹¡£¤½¤ì°Ê¹ß¤Î¥µ¡¼¥Ð¤Ø¤ÎÀܳ¤¬¼«
ưŪ¤Ëµö²Ä¤µ¤ì¤ë¤è¤¦¤Ë¡¢¼õÂú¤·¤¿¾ÚÌÀ½ñ¤òÊݸ¤¹¤ë¤³¤È¤â¤Ç¤­¤Þ¤¹¡£

ÁÈ¿¥Æâ¤Ë¤¤¤¯¤Ä¤«¤ÎƱÅù¤Ê IMAP ¥µ¡¼¥Ð¤¬¤¢¤ë¾ì¹ç¤Ë¤Ï¡¢¸Ä¡¹¤Î¥µ¡¼¥Ð¤Ï¶¦ÄÌ
¤Î¾ÚÌÀ½ñ¤Ç½ð̾¤µ¤ì¤¿¤¿¤À°ì¤Ä¤Î¾ÚÌÀ½ñ¤ò»ý¤Ä¤Ï¤º¤Ç¤¹¡£¤³¤ì¤é¤Î¥µ¡¼¥Ð¤òÁ´
¤ÆÍøÍѤ·¤¿¤¤¤Î¤Ç¤¢¤ì¤Ð¡¢ºÇ½é¤ËÀܳ¤·¤¿»þ¤Ë¡¢¸Ä¡¹¤Î¥µ¡¼¥Ð¤Î¾ÚÌÀ½ñ¤òÊݸ
¤¹¤ëɬÍפϤ¢¤ê¤Þ¤»¤ó¡£Âå¤ï¤ê¤Ë¡¢½ð̾¼Ô¤Î¾ÚÌÀ½ñ¤ò¼èÆÀ¤·¡¢Âå¤ï¤ê¤Ë¤½¤ì¤ò
Êݸ¤¹¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£¤½¤¦¤·¤¿¤é¡¢Mutt ¤ÏÊݸ¤µ¤ì¤Æ¤¤¤ë¾ÚÌÀ½ñ¤Ç½ð̾
¤µ¤ì¤¿Á´¤Æ¤Î¾ÚÌÀ½ñ¤ò¼«Æ°Åª¤ËµöÂú¤¹¤ë¤Ç¤·¤ç¤¦¡£

¥·¥¹¥Æ¥àÁ´ÂΤξÚÌÀ½ñ¤Ï¾ÚÌÀ½ñ¤ò³Îǧ¤¹¤ë¤È¤­¤Ë¥Ç¥Õ¥©¥ë¥È¤Ç½ð̾¼Ô¤Ë¤è¤Ã¤Æ
¿®ÍѤµ¤ì¤¿¤â¤Î¤È¤ß¤Ê¤µ¤ì¤Þ¤¹¡£¤³¤Î¤³¤È¤Ï¥·¥¹¥Æ¥à´ÉÍý¼Ô¤ËÁ´¥æ¡¼¥¶¤Î¤¿¤á
¤Î¿®ÍѤµ¤ì¤¿¾ÚÌÀ½ñ¤òÅÐÏ¿¤¹¤ë¤³¤È¤òµö²Ä¤·¤Þ¤¹¡£¥·¥¹¥Æ¥àÁ´ÂΤξÚÌÀ½ñ¤Î¥¤
¥ó¥¹¥È¡¼¥ëÊýË¡¤Ï OpenSSL ¤Î¥¤¥ó¥¹¥È¡¼¥ë¤Ë°Í¸¤·¤Þ¤¹¡£¥·¥¹¥Æ¥àÁ´ÂΤξÚ
ÌÀ½ñ¤Î»ÈÍѤÏÊÑ¿ô $ssl_usesystemcerts ¤Î²ò½ü¤Ë¤è¤Ã¤Æ̵¸ú¤Ë¤¹¤ë¤³¤È¤¬½Ð
Íè¤Þ¤¹¡£

¾ÚÌÀ½ñ¤ÏÊÑ¿ô $certificate_file ¤Ë¤è¤Ã¤Æ»ØÄꤵ¤ì¤¿¥Õ¥¡¥¤¥ë¤ËÊݸ¤µ¤ì¤Þ
¤¹¡£¤³¤ÎÊÑ¿ô¤Ï¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¶õ¤Ç¤¹¡£¤½¤Î¤¿¤á¡¢¥µ¡¼¥Ð¤ËÀܳ¤¹¤ë¤¿¤Ó¤Ë¾Ú
ÌÀ½ñ¤ò¸¡¾Ú¤·¤¿¤¯¤Ê¤±¤ì¤Ð¡¢¤³¤ÎÊÑ¿ô¤òŬÀÚ¤ÊÃͤËÀßÄꤷ¤Þ¤¹¡£

Îã:
	set certificate_file=~/.mutt/certificates


¥È¥é¥Ö¥ë¥·¥å¡¼¥Æ¥£¥ó¥°
----------------------
¾å½Ò¤Î¤³¤È¤ò¹Ô¤Ã¤¿¸å¤Ë¤¦¤Þ¤¯Àܳ¤Ç¤­¤Ê¤¤¤Î¤Ç¤¢¤ì¤Ð¡¢IMAP¥µ¡¼¥Ð¤¬SSL¥×
¥í¥È¥³¥ë¤Î°ì¤Ä¤ò¥µ¥Ý¡¼¥È¤·¤Æ¤¤¤Ê¤¤¤È¤¤¤¦¤³¤È¤¬¤¢¤ê¤½¤¦¤Ç¤¹¡£TLSv1, 
SSLv2, SSLv3 ¤È¤¤¤Ã¤¿£³¤Ä¤Î°Û¤Ê¤ë¥×¥í¥È¥³¥ë¤¬¤¢¤ê¤Þ¤¹¡£¤³¤Î¤½¤ì¤¾¤ì¤ò
³Îǧ¤¹¤ë¤¿¤á¤Ë¡¢¼¡¤Î¤³¤È¤ò¹Ô¤¤¤Þ¤¹¡£
    openssl s_client -host <imap server> -port <port> -verify -debug -no_tls1
    openssl s_client -host <imap server> -port <port> -verify -debug -no_ssl2
    openssl s_client -host <imap server> -port <port> -verify -debug -no_ssl3

Àܳ¤ËÀ®¸ù¤¹¤ë¤Þ¤Ç¤½¤Î¥ª¥×¥·¥ç¥ó¤òÁȤ߹ç¤ï¤»¤ë¤³¤È¤â¤Ç¤­¤Þ¤¹¡£¤É¤Î¥ª¥×
¥·¥ç¥ó¤¬µ¡Ç½¤·¤Ê¤¤¤«¤¬¤ï¤«¤Ã¤¿¤é¡¢¤ï¤«¤Ã¤¿µ¡Ç½¤·¤Ê¤¤¥×¥í¥È¥³¥ë¤òÊÑ¿ô¤Ë
ÀßÄꤹ¤ë¤³¤È¤¬½ÐÍè¤Þ¤¹¡£¤½¤Î¥×¥í¥È¥³¥ë¤ÎÊÑ¿ô¤Ï ssl_use_tlsv1,
ssl_use_sslv2, ssl_use_sslv3 ¤Ç¤¹¡£

-- 
Tommi Komulainen
Tommi.Komulainen@iki.fi

Updated by Jeremy Katz
katzj@linuxpower.org

The original file is README.SSL.