https login and zmcertinstall

[marcmac]

How is outlook express configured? To use SSL, or to use TLS auth?

[DMRDave]

Tried with Tbird as well. Same behavior. Something is going on with the smtp ssl it seems.

[DMRDave]

How is outlook express configured? To use SSL, or to use TLS auth?

Outlook is configured for SSL.

[marcmac]

su - zimbra
openssl verify -CAfile conf/ca/ca.pem conf/smtpd.crt

Is there any way you can set up a test account I can hit with my imap client to test? (If so, pm me with the details).

[marcmac]

What do you get from:
su - zimbra
zmprov gacf | grep zimbraMta | grep Auth
zmprov gs SERVER | grep -i auth

(Replace SERVER with your server name)

[DMRDave]

su - zimbra
openssl verify -CAfile conf/ca/ca.pem conf/smtpd.crt

Is there any way you can set up a test account I can hit with my imap client to test? (If so, pm me with the details).

zimbra@dmrmail01:~/log> openssl verify -CAfile conf/ca/ca.pem conf/smtpd.crt
Error loading file conf/ca/ca.pem
28474:error:02001002:system library:fopen:No such file or directory:bss_file.c:104:fopen('conf/ca/ca.pem','r')
28474:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:107:
28474:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:274:
usage: verify [-verbose] [-CApath path] [-CAfile file] [-purpose purpose] [-crl_check] [-engine e] cert1 cert2 ...
recognized usages:
sslclient SSL client
sslserver SSL server
nssslserver Netscape SSL server
smimesign S/MIME signing
smimeencrypt S/MIME encryption
crlsign CRL signing
any Any Purpose
ocsphelper OCSP helper

[DMRDave]

What do you get from:
su - zimbra
zmprov gacf | grep zimbraMta | grep Auth
zmprov gs SERVER | grep -i auth

(Replace SERVER with your server name)

zimbra@dmrmail01:~/log> zmprov gacf | grep zimbraMta | grep Auth
zimbraMtaAuthEnabled: TRUE
zimbraMtaTlsAuthOnly: TRUE
zimbraServerInheritedAttr: zimbraMtaAuthEnabled
zimbraServerInheritedAttr: zimbraMtaAuthHost
zimbraServerInheritedAttr: zimbraMtaAuthURL
zimbraServerInheritedAttr: zimbraMtaTlsAuthOnly
zimbra@dmrmail01:~/log> zmprov gs dmrmail01.dmrcom.com | grep -i auth
zimbraMtaAuthEnabled: TRUE
zimbraMtaAuthHost: dmrmail01.dmrcom.com
zimbraMtaAuthURL: https://dmrmail01.dmrcom.com:443/service/soap/
zimbraMtaTlsAuthOnly: TRUE

[marcmac]

you ran that from the wrong directory - cd /opt/zimbra and run the openssl command again.

[DMRDave]

Once again, my bad.

zimbra@dmrmail01:~> openssl verify -CAfile conf/ca/ca.pem conf/smtpd.crt
conf/smtpd.crt: OK