Sendmail 8.13.3 Securing Mailing Solution

NOTE: You must install the latest version of the OpenSSL software from http://
www.software.hp.com, to avoid errors while running the CA.pl script. Table 2
(page 23) lists the version of OpenSSL that you must install for a particular HP-UX
operating system.
Table 2 OpenSSL Versions
OpenSSL VersionOperating System Name
A.00.09.07lHP-UX 11i v1
A.00.09.07l.001HP-UX 11i v2
A.00.09.08d.001HP-UX 11i v3
• The CyrusSASL version A.06.00-2.1.21 product in the HP-UX Internet Express
bundle.
NOTE: Do not use the latest version of CyrusSASL (A.06.00-2.1.22), because it
poses some issues with Sendmail 8.13.3.
• The latest version of the Sendmail 8.13.3 web upgrade.
NOTE: For the HP-UX 11i v3 operating system, Sendmail 8.13.3 is available as
part of the core HP-UX operating system. For the HP-UX 11i v1 and HP-UX 11i
v2 operating systems, Sendmail 8.13.3 is available as a web upgrade at:
http://www.software.hp.com.
Setting up the Sendmail 8.13.3 Server with SASL
Before setting up the Sendmail 8.13.3 server with SASL, ensure that you have completed
the following tasks:
• The STARTTLS feature is set up, as discussed in “Configuring Sendmail 8.13.3
with TLS and SSL” (page 13), before using the DIGEST-MD5 algorithm.
• The SASL libraries are installed in a default location accessed by Sendmail 8.13.3.
The libraries must be safe, that is, they must be owned by the superuser and must
be writable only by the superuser. The path of the SASL libraries must also be safe.
• The existing Sendmail 8.13.3 configuration files (/etc/mail/sendmail.cf and
/etc/mail/submit.cf) are backed up so that you can revert to the original
state if you encounter any configuration issues and you do not loose any
site-specific customized configuration.
Follow this procedure to set up the Sendmail 8.13.3 server with SASL:
Configuring Sendmail 8.13.3 with SASL 23