Results 1 to 10 of 10

Thread: osx - upgrade from 4.0.3 to 4.5 GA - ssl, cert error, can't send mail

Hybrid View

  1. #1
    Join Date
    Sep 2006
    Posts
    18
    Rep Power
    9

    Default osx - upgrade from 4.0.3 to 4.5 GA - ssl, cert error, can't send mail

    below is a snippet from my /var/log/zimbra.log

    Code:
    myhost postfix/smtpd[29445]: connect from myhost/myipaddress
    Jan 23 21:54:24 myhost postfix/smtpd[29445]: setting up TLS connection from myhost/myipaddress
    Jan 23 21:54:25 myhost postfix/smtpd[29445]: TLS connection established from myhost/myipaddress: TLSv1 with cipher AES128-SHA (128/128 bits)
    Jan 23 21:54:27 myhost saslauthd[23191]: auth_zimbra: me@mydomain auth failed: curl_easy_perform: error(60): SSL certificate problem, verify that the CA cert is OK. Details:\nerror:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
    Jan 23 21:54:27 myhost saslauthd[23191]: do_auth         : auth failure: [user=me@mydomain] [service=smtp] [realm=mydomain] [mech=zimbra] [reason=Unknown]
    Jan 23 21:54:27 myhost postfix/smtpd[29445]: warning: SASL authentication failure: Password verification failed

    i obviously sanitized my host, domain, and client info

    my environment:

    4.5.0_GA_612_MACOSX
    upgraded from 4.0.3 GA
    running on osx server 10.4.8 w zimbra ldap

    after the update (which appeared to go smoothly) i cannot send mail via imap smtp using secure mail port 25.

    i've read several threads related to sasl-tls errors and have checked my auth methods and auth urls. the default after upgrade was mixed auth, i changed to https but no joy. i manually recreated and installed new certs via wiki, no joy.

    i then re-ran zmsetup.pl with no change. the log snippet is post upgrade (second time). i basically wanted to undo any damage i might have done in troubleshooting and chasing the sasl-tls threads.

    if anyone can offer a suggestion, that'd be great. i'm going to check this thread wed. a.m. and hopefully be able to remedy with your help.

    tia, george

  2. #2
    Join Date
    Oct 2005
    Location
    Thatcher, AZ
    Posts
    5,606
    Rep Power
    21

    Default

    Did you take a look at here:
    http://wiki.zimbra.com/index.php?tit...icate_Problems

    DON"T FORGET TO BACKUP!

  3. #3
    Join Date
    Sep 2006
    Posts
    18
    Rep Power
    9

    Default

    yes, i tried this procedure (not the optional parts) but don't know enough about it to really test the results. i do have the updated certs in ldap and they match the files in /opt/zimbra locations.

    thanks for the pointer. i'm hoping someone else will ring in.

    geo

  4. #4
    Join Date
    Sep 2006
    Posts
    18
    Rep Power
    9

    Default

    i've re-read some threads on sasl errors when trying to send emai from imap / pop3 clients securely. these are very similar, if not identical to what i'm seeing.

    to clarify, webmail is working correctly. client auth for imap and pop3 delivery is working correctly.

    client auth for sending via ssl is what's not working.

    -george

  5. #5
    Join Date
    Sep 2006
    Posts
    18
    Rep Power
    9

    Default

    any other suggestions? i'm going to backup / re-install tonight if i can't get any resolution within the next few hours.

    -george

  6. #6
    Join Date
    Oct 2005
    Location
    Thatcher, AZ
    Posts
    5,606
    Rep Power
    21

    Default

    Yeah,
    You should be able to do a reinstall that might fix it.
    Run the install as an upgrade, and I believe it reinstalls the certs.

    jh

Similar Threads

  1. Problems with port 25
    By yogiman in forum Installation
    Replies: 57
    Last Post: 06-13-2011, 01:55 PM
  2. Replies: 7
    Last Post: 02-03-2011, 06:01 AM
  3. fresh install down may be due to tomcat
    By gon in forum Installation
    Replies: 10
    Last Post: 07-25-2007, 08:09 AM
  4. DynDNS and Zimbra
    By afterwego in forum Installation
    Replies: 30
    Last Post: 04-01-2007, 03:34 PM
  5. receiveing mail
    By maybethistime in forum Administrators
    Replies: 15
    Last Post: 12-09-2005, 03:55 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •