Page 3 of 3 FirstFirst 123
Results 21 to 29 of 29

Thread: https login and zmcertinstall

  1. #21
    Join Date
    Sep 2005
    Posts
    2,103
    Rep Power
    14

    Default

    How is outlook express configured? To use SSL, or to use TLS auth?

  2. #22
    Join Date
    Feb 2006
    Location
    Southern California
    Posts
    49
    Rep Power
    9

    Default

    Tried with Tbird as well. Same behavior. Something is going on with the smtp ssl it seems.

  3. #23
    Join Date
    Feb 2006
    Location
    Southern California
    Posts
    49
    Rep Power
    9

    Default

    Quote Originally Posted by marcmac
    How is outlook express configured? To use SSL, or to use TLS auth?
    Outlook is configured for SSL.

  4. #24
    Join Date
    Sep 2005
    Posts
    2,103
    Rep Power
    14

    Default

    su - zimbra
    openssl verify -CAfile conf/ca/ca.pem conf/smtpd.crt

    Is there any way you can set up a test account I can hit with my imap client to test? (If so, pm me with the details).

  5. #25
    Join Date
    Sep 2005
    Posts
    2,103
    Rep Power
    14

    Default

    What do you get from:
    su - zimbra
    zmprov gacf | grep zimbraMta | grep Auth
    zmprov gs SERVER | grep -i auth

    (Replace SERVER with your server name)

  6. #26
    Join Date
    Feb 2006
    Location
    Southern California
    Posts
    49
    Rep Power
    9

    Default

    Quote Originally Posted by marcmac
    su - zimbra
    openssl verify -CAfile conf/ca/ca.pem conf/smtpd.crt

    Is there any way you can set up a test account I can hit with my imap client to test? (If so, pm me with the details).
    zimbra@dmrmail01:~/log> openssl verify -CAfile conf/ca/ca.pem conf/smtpd.crt
    Error loading file conf/ca/ca.pem
    28474:error:02001002:system library:fopen:No such file or directory:bss_file.c:104:fopen('conf/ca/ca.pem','r')
    28474:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:107:
    28474:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:274:
    usage: verify [-verbose] [-CApath path] [-CAfile file] [-purpose purpose] [-crl_check] [-engine e] cert1 cert2 ...
    recognized usages:
    sslclient SSL client
    sslserver SSL server
    nssslserver Netscape SSL server
    smimesign S/MIME signing
    smimeencrypt S/MIME encryption
    crlsign CRL signing
    any Any Purpose
    ocsphelper OCSP helper

  7. #27
    Join Date
    Feb 2006
    Location
    Southern California
    Posts
    49
    Rep Power
    9

    Default

    Quote Originally Posted by marcmac
    What do you get from:
    su - zimbra
    zmprov gacf | grep zimbraMta | grep Auth
    zmprov gs SERVER | grep -i auth

    (Replace SERVER with your server name)
    zimbra@dmrmail01:~/log> zmprov gacf | grep zimbraMta | grep Auth
    zimbraMtaAuthEnabled: TRUE
    zimbraMtaTlsAuthOnly: TRUE
    zimbraServerInheritedAttr: zimbraMtaAuthEnabled
    zimbraServerInheritedAttr: zimbraMtaAuthHost
    zimbraServerInheritedAttr: zimbraMtaAuthURL
    zimbraServerInheritedAttr: zimbraMtaTlsAuthOnly
    zimbra@dmrmail01:~/log> zmprov gs dmrmail01.dmrcom.com | grep -i auth
    zimbraMtaAuthEnabled: TRUE
    zimbraMtaAuthHost: dmrmail01.dmrcom.com
    zimbraMtaAuthURL: https://dmrmail01.dmrcom.com:443/service/soap/
    zimbraMtaTlsAuthOnly: TRUE

  8. #28
    Join Date
    Sep 2005
    Posts
    2,103
    Rep Power
    14

    Default

    you ran that from the wrong directory - cd /opt/zimbra and run the openssl command again.

  9. #29
    Join Date
    Feb 2006
    Location
    Southern California
    Posts
    49
    Rep Power
    9

    Default

    Once again, my bad.

    zimbra@dmrmail01:~> openssl verify -CAfile conf/ca/ca.pem conf/smtpd.crt
    conf/smtpd.crt: OK

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •