Zimbra

InternetGuy · #1 (**permalink**) 12-31-2007, 01:23 AM

Hello,

My attempts to upgrade a CentOS-5.1 box running 4.5.10 to 5.0 failed. Everything web-related seems to work fine (it's nice BTW), but the postfix step went wrong somehow. It accepts no mail whatsoever. Here's a telnet test:

% telnet 192.168.1.64 25
Trying 192.168.1.64...
Connected to 192.168.1.64.
Escape character is '^]'.
220 zcs.internetguy.net ESMTP Postfix
ehlo internetguy.net
250-zcs.internetguy.net
250-PIPELINING
250-SIZE 51200000
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
mail from:<jack@internetguy.net>
[hangs forever]

When I run strace -p on the pid associated with this process I see it waiting on a poll() event. I turned off iptables during the test to ensure firewall rules aren't affecting postfix or ldap in any way.

Ideas?

Jack

*Chewie71* · #2 (**permalink**) 12-31-2007, 06:35 AM

Jack,

Lots of people are having this problem...I had it... Did you originally install this more than a year ago?

If you look in /var/log/zimbra.log there are probably a bunch of errors about SSL certs being invalid. This thread explains the fix.

[SOLVED] Expired Cert in 5.0GA can cause mail Delivery failure

Matt

InternetGuy · #3 (**permalink**) 12-31-2007, 12:44 PM

Quote:

Originally Posted by Chewie71

Jack,

Lots of people are having this problem...I had it... Did you originally install this more than a year ago?

If you look in /var/log/zimbra.log there are probably a bunch of errors about SSL certs being invalid. This thread explains the fix.

[SOLVED] Expired Cert in 5.0GA can cause mail Delivery failure

Matt

Interesting read. Thanks for the pointer. In my case the cert is signed by Equifax, and it is valid until February. If the cert handling is indeed the conversion bug, it appears as though the CA and expiration dates don't matter.

Jack

InternetGuy · #4 (**permalink**) 01-12-2008, 02:44 PM

Tried the upgrade from 4.5.10 to 5.0.1 last night and it failed. Looks to be the same problem (commerical cert?) at 5.0. I did not notice any errors or anything unusual during the upgrade.

Is there any way to skip over this, then reinstall the commercial cert after the upgrade?