SSL trouble

[johndevine]

I don't seem to be able to connect to any accounts over ssl, I can connect to the secure admin page on 7071 though, is this an install/setup problem? and if so any pointers anywhere? I have ports 80, 443 and 7071 open, do i need anymore?

Regards

JD

[agnOstos]

Are you trying to POP in? If so, what client? Through a firewall? I ended up opening port 995.

[marcmac]

If you're trying to use the https interface to the web client -
su - zimbra
zmtlsctl https (or mixed, for https login and http sessions)
tomcat stop
tomcat start

[johndevine]

Hi Marc

Worked a treat....i did enter mixed on install though, is that not enough?

JD

[marcmac]

Apparently, the installer isn't setting the mode right I'll take a look next week.

[johndevine]

OK Thanks Marc

Its a nice setup having worked with mail servers for about 8 years, its a bit slow here, but i am testing it on an old p3 700 and 512 ram, i guess thats why. Need to get it on a fast box

JD

[Daryl Jones]

Is there a way to configure Zimbra to accept initial connections with http and immediately redirect to https?

[marcmac]

I think https mode will force a redirect from port 80

[Daryl Jones]

Zimbra is refusing http (port 80) connections when 'zmtlsctl https' is set. It would be nice if it accepted the connection and redirected to https.

[johndevine]

I am seeing an ssl error, although I can connect securely via a browser....

Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0394 -
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: SSL_accept:SSLv3 flush data
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: read from 09A6F1C8 [09A79420] (5 bytes => -1 (0xFFFFFFFF))
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: SSL_accept:error in SSLv3 read client certificate A
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: read from 09A6F1C8 [09A79420] (5 bytes => 5 (0x5))
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0000 16 03 01 00 86 .....
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: read from 09A6F1C8 [09A79425] (134 bytes => -1 (0xFFFFFFFF))
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: SSL_accept:error in SSLv3 read client certificate A
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: read from 09A6F1C8 [09A79425] (134 bytes => 134 (0x86))
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0000 10 00 00 82 00 80 83 29|48 bd 4e 3f 5a 44 72 06 .......) H.N?ZDr.
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0010 50 be 47 4f fd 91 0f 78|b4 71 73 38 e5 3d a5 82 P.GO...x .qs8.=..
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0020 90 e8 0d b7 5d 91 7d d0|c6 58 f2 ec ee 80 c6 32 ....].}. .X.....2
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0030 3d 55 70 c8 4b c3 ed 65|bc 1e 03 22 43 b6 5f 63 =Up.K..e ..."C._c
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0040 bd ae 0d 46 98 6d 41 7f|e2 e9 1c 49 30 b8 ec ea ...F.mA. ...I0...
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0050 98 1c f2 06 ed 49 54 82|d9 d1 09 bb 6e f6 40 c5 .....IT. ....n.@.
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0060 10 b2 7e b8 89 95 bf b9|98 92 dc 4a 14 c7 a5 fd ..~..... ...J....
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0070 de eb f3 b8 c6 62 56 58|2b 02 5a b4 b8 9f 9c d2 .....bVX +.Z.....
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0080 70 e8 d0 da 00 ad p.....
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: SSL_accept:SSLv3 read client key exchange A
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: read from 09A6F1C8 [09A79420] (5 bytes => -1 (0xFFFFFFFF))
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: SSL_accept:error in SSLv3 read certificate verify A
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: read from 09A6F1C8 [09A79420] (5 bytes => 5 (0x5))
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0000 14 03 01 00 01 .....
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: read from 09A6F1C8 [09A79425] (1 bytes => -1 (0xFFFFFFFF))
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: SSL_accept:error in SSLv3 read certificate verify A
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: read from 09A6F1C8 [09A79425] (1 bytes => 1 (0x1))
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0000 01 .
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: read from 09A6F1C8 [09A79420] (5 bytes => -1 (0xFFFFFFFF))
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: SSL_accept:error in SSLv3 read certificate verify A
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: read from 09A6F1C8 [09A79420] (5 bytes => 5 (0x5))
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0000 16 03 01 ...
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0003 -
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: read from 09A6F1C8 [09A79425] (32 bytes => -1 (0xFFFFFFFF))
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: SSL_accept:error in SSLv3 read certificate verify A
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: read from 09A6F1C8 [09A79425] (32 bytes => 32 (0x20))
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0000 52 4b 58 af 21 5d 8d ae|95 14 b7 5c fe 72 6d 65 RKX.!].. ...\.rme
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0010 d3 f8 39 21 37 6e 78 bc|86 1b 25 0b ed 0e 7c 82 ..9!7nx. ..%...|.
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: SSL_accept:SSLv3 read finished A
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: SSL_accept:SSLv3 write change cipher spec A
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: SSL_accept:SSLv3 write finished A
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: write to 09A6F1C8 [09A875E8] (43 bytes => 43 (0x2B))
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0000 14 03 01 00 01 01 16 03|01 00 20 78 69 46 4f 72 ........ .. xiFOr
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0010 51 98 6a 2e 77 cb 93 93|9c 44 63 5c cd 13 0a de Q.j.w... .Dc\....
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: 0020 c2 bc d5 6a 7e ff 36 f0|da aa e9 ...j~.6. ...
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: SSL_accept:SSLv3 flush data
Nov 27 04:17:47 jdmx3 postfix/smtpd[12470]: TLS connection established from

Should I worry?

Regards

JD