Page 3 of 3 FirstFirst 123
Results 21 to 29 of 29

Thread: https login and zmcertinstall

  1. #21
    Join Date
    Sep 2005
    Posts
    2,103
    Rep Power
    15

    Default

    How is outlook express configured? To use SSL, or to use TLS auth?

  2. #22
    Join Date
    Feb 2006
    Location
    Southern California
    Posts
    49
    Rep Power
    10

    Default

    Tried with Tbird as well. Same behavior. Something is going on with the smtp ssl it seems.

  3. #23
    Join Date
    Feb 2006
    Location
    Southern California
    Posts
    49
    Rep Power
    10

    Default

    Quote Originally Posted by marcmac
    How is outlook express configured? To use SSL, or to use TLS auth?
    Outlook is configured for SSL.

  4. #24
    Join Date
    Sep 2005
    Posts
    2,103
    Rep Power
    15

    Default

    su - zimbra
    openssl verify -CAfile conf/ca/ca.pem conf/smtpd.crt

    Is there any way you can set up a test account I can hit with my imap client to test? (If so, pm me with the details).

  5. #25
    Join Date
    Sep 2005
    Posts
    2,103
    Rep Power
    15

    Default

    What do you get from:
    su - zimbra
    zmprov gacf | grep zimbraMta | grep Auth
    zmprov gs SERVER | grep -i auth

    (Replace SERVER with your server name)

  6. #26
    Join Date
    Feb 2006
    Location
    Southern California
    Posts
    49
    Rep Power
    10

    Default

    Quote Originally Posted by marcmac
    su - zimbra
    openssl verify -CAfile conf/ca/ca.pem conf/smtpd.crt

    Is there any way you can set up a test account I can hit with my imap client to test? (If so, pm me with the details).
    zimbra@dmrmail01:~/log> openssl verify -CAfile conf/ca/ca.pem conf/smtpd.crt
    Error loading file conf/ca/ca.pem
    28474:error:02001002:system library:fopen:No such file or directory:bss_file.c:104:fopen('conf/ca/ca.pem','r')
    28474:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:107:
    28474:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:274:
    usage: verify [-verbose] [-CApath path] [-CAfile file] [-purpose purpose] [-crl_check] [-engine e] cert1 cert2 ...
    recognized usages:
    sslclient SSL client
    sslserver SSL server
    nssslserver Netscape SSL server
    smimesign S/MIME signing
    smimeencrypt S/MIME encryption
    crlsign CRL signing
    any Any Purpose
    ocsphelper OCSP helper

  7. #27
    Join Date
    Feb 2006
    Location
    Southern California
    Posts
    49
    Rep Power
    10

    Default

    Quote Originally Posted by marcmac
    What do you get from:
    su - zimbra
    zmprov gacf | grep zimbraMta | grep Auth
    zmprov gs SERVER | grep -i auth

    (Replace SERVER with your server name)
    zimbra@dmrmail01:~/log> zmprov gacf | grep zimbraMta | grep Auth
    zimbraMtaAuthEnabled: TRUE
    zimbraMtaTlsAuthOnly: TRUE
    zimbraServerInheritedAttr: zimbraMtaAuthEnabled
    zimbraServerInheritedAttr: zimbraMtaAuthHost
    zimbraServerInheritedAttr: zimbraMtaAuthURL
    zimbraServerInheritedAttr: zimbraMtaTlsAuthOnly
    zimbra@dmrmail01:~/log> zmprov gs dmrmail01.dmrcom.com | grep -i auth
    zimbraMtaAuthEnabled: TRUE
    zimbraMtaAuthHost: dmrmail01.dmrcom.com
    zimbraMtaAuthURL: https://dmrmail01.dmrcom.com:443/service/soap/
    zimbraMtaTlsAuthOnly: TRUE

  8. #28
    Join Date
    Sep 2005
    Posts
    2,103
    Rep Power
    15

    Default

    you ran that from the wrong directory - cd /opt/zimbra and run the openssl command again.

  9. #29
    Join Date
    Feb 2006
    Location
    Southern California
    Posts
    49
    Rep Power
    10

    Default

    Once again, my bad.

    zimbra@dmrmail01:~> openssl verify -CAfile conf/ca/ca.pem conf/smtpd.crt
    conf/smtpd.crt: OK

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •