[SOLVED] https

[mclain]

We would like to connect to all acounts via https. Can someone point me to directions on how to do this?

Thanks

[SpEnTBoY]

CLI zmtlsctl to set Web Server Mode - ZimbraWiki


The wiki is actually pretty amazing do you have anything else on that port as it is now?

# lsof -i :443

does that show anything?

[mclain]

Thanks. When I run the command I recieve a bash: zmtlsctl: command not found error. I am running this from root. Is this where I should run this command?

Thanks again

[SpEnTBoY]

Thanks. When I run the command I recieve a bash: zmtlsctl: command not found error. I am running this from root. Is this where I should run this command?

Thanks again

Ahh sorry I should have mentioned that ;-) you need to run it as user zimbra:

# su - zimbra
$

[mclain]

Perfect . Thanks alot.

[robh]

Is it possible to get zmtlsctl to redirect http://server to https://server for everything (not just logins).

The nearest I can get is zmtlsctl mixed, but that just redirects for the login. It would be good if zmtlsctl included the redirect.

I guess I could set something up without too much trouble, but it would be nice if it happened by default.

Rob

[mmorse]

That is the point of mixed mode (just https for logins)
Your looking for the 'redirect' mode that is in v5.

Using 4.5 one method to redirect http>https & continue to use https after the login would be:
-Edit /opt/zimbra/tomcat/webapps/zimbra/public/Login.jsp and comment out this statement so that http connections are *never redirected back* to http:

qs = emptyQs? "?initMode=" + currentProto: qs + "&initMode=" + currentProto;

zmcontrol stop/start

Though you've already done this-be sure to set the mail mode to mixed to allow the initial http connections that will be redirected to https:

zmtlsctl mixed
tomcat restart

See other methods in this RFE:
Bug 7631 - redirect to https mode problem
Thus we now have http, https, both, mixed, redirect

[mmorse]

Updated wiki: CLI zmtlsctl to set Web Server Mode - ZimbraWiki

[robh]

That did it - thanks.