SSL IMAP not working

Hey all. We're testing iMS 5.2 and I've run into a problem. I have generated a certificate request (csr) and self-signed it with openssl. The self-signed cert was added with no errors. I then went and added our CA cert and it was accepted with no problems. Next I went to Services, then Encryption, enabled SSL and RSA and pointed it to the cert. This all went off without a hitch.

Now, I go to IMAP, enable the sepearte port SSL (port 993) and save the info. No error messages. Then, just to be sure, I check the local.conf file and it shows to use ssl port 993 and that the ssl port is enabled. Finally, just to be safe, I shutdown and restart iMS with the stop and start scripts.

So, now when I try to connect via secure imap from a client I get the message "Could not connect to mail server ...; the connection was refused." I try telnetting to port 993 and I just get the message "telnet: Unable to connect to remote host: Connection refused". Finally I scan the box and it is not showing port 993 as open.

I've checked the log files and there are no errors anywhere and there is also no reference to any connections to port 993.

So, any ideas on what is going on here? I'm scratching my head on this one. Any and all help is appreciated. Thanks.

[1293 byte] By [OneTrueBob] at [2007-11-25 8:49:08]
# 1
A little birdie told me that openssl does not create the SSL certificate properly. I used Sun Certificate Server to create and install a certificate and I have no problems using SSL w/IMAP.
bdelbono at 2007-7-1 15:35:45 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 2
If this is the case, then why does iMS accept the certs from openssl with no problem when I add them and it doesn't give any error messages about the scripts when I restart the server or try to start the service on the ssl port?
OneTrueBob at 2007-7-1 15:35:45 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 3
I found the problem. OpenSSL works just fine, but you need to make sure and change the default netscape! password in sslpassword.conf in msg-*/config to what you set your Trust Database password to be. Nowhere did I see this in any of the docs.
OneTrueBob at 2007-7-1 15:35:45 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...