Search found 573 matches

by JDunphy
Fri Apr 02, 2021 4:14 pm
Forum: Administrators
Topic: Zimbra 8.8.15 failed to start after reboot
Replies: 17
Views: 2658

Re: Zimbra 8.8.15 failed to start after reboot

Hi Martin, I am glad it worked for you. The latest kernel isn't generally a problem but starting with openssl 1.1.1.1d it broke much including docker, ssh, etc with this specific entropy problem for random number generators. I have an internal bug with zimbra on this and they are investigating. They...
by JDunphy
Fri Apr 02, 2021 5:59 am
Forum: Administrators
Topic: Zimbra 8.8.15 failed to start after reboot
Replies: 17
Views: 2658

Re: Zimbra 8.8.15 failed to start after reboot

For linode... this is will be very simple so you are in luck Find a kernel ... Choose 4.7.3-x86_64_linode73 ... it is near the bottom of the list of kernels. No grub or direct just replace the current kernel version Here is the link that is close... suppport should be able to walk you through also. ...
by JDunphy
Fri Apr 02, 2021 3:48 am
Forum: Administrators
Topic: Zimbra 8.8.15 failed to start after reboot
Replies: 17
Views: 2658

Re: Zimbra 8.8.15 failed to start after reboot

You are running a kernel newer than 4.8 ... booting a kernel that is 4.7 or below will resolve this for you. That is the same problem I had.

Jim
by JDunphy
Thu Apr 01, 2021 8:25 pm
Forum: Installation and Upgrade
Topic: Solved: DANGER: 8.8.15p20 broke working machine openssl
Replies: 15
Views: 16079

Re: Solved: DANGER: 8.8.15p20 broke working machine openssl

Found another solution to this problem so that it will work with kernel 4.8+ .... here is the recipe to recompile with the following options. % mkdir openssl % cd openssl % wget https://www.openssl.org/source/old/1.1.1/openssl-1.1.1h.tar.gz % tar zxvf openssl-1.1.1h.tar.gz % cd openssl-1.1.1h % ./co...
by JDunphy
Thu Apr 01, 2021 4:44 pm
Forum: Administrators
Topic: Zimbra 8.8.15 failed to start after reboot
Replies: 17
Views: 2658

Re: Zimbra 8.8.15 failed to start after reboot

Can you do this...

Code: Select all

% uname -r

I moved to a kernel less than 4.8 and that fixed the problem. See my post on this.

Note: many cloud providers running KVM will run newer kernels. That is probably what happened to you.

Jim
by JDunphy
Thu Apr 01, 2021 4:41 pm
Forum: Installation and Upgrade
Topic: Solved: DANGER: 8.8.15p20 broke working machine openssl
Replies: 15
Views: 16079

Re: DANGER: 8.8.15p20 broke working machine openssl

Hi Jim and everyone, How are you? We are planning to carry out this update this weekend but we should postpone it a bit :) BTW, our system is quite large (3TB mailstore servers). We have NGBackup. Normally we do vmware snapshot before doing any update. However, now the data on VM is quite big and c...
by JDunphy
Thu Apr 01, 2021 4:34 pm
Forum: Installation and Upgrade
Topic: Solved: DANGER: 8.8.15p20 broke working machine openssl
Replies: 15
Views: 16079

Re: DANGER: 8.8.15p20 broke working machine openssl

Does disabling TLS for LDAP allow it to start? su - zimbra zmlocalconfig -e ssl_allow_untrusted_certs=true zmlocalconfig -e ldap_starttls_supported=0 zmlocalconfig -e ldap_starttls_required=false zmlocalconfig -e ldap_common_require_tls=0 zmcontrol restart For this bug, it would not work as the lib...
by JDunphy
Thu Apr 01, 2021 4:32 pm
Forum: Installation and Upgrade
Topic: Solved: DANGER: 8.8.15p20 broke working machine openssl
Replies: 15
Views: 16079

Re: DANGER: 8.8.15p20 broke working machine openssl

This is resolved... the problem was the latest kernel. Kernels newer than 4.8 have bad entropy according to change notes and various others discussing the problem. OpenSSL is full of surprises... CHANGES says: Linux kernels 4.8 and later, don't have a reliable way to detect that /dev/urandom has bee...
by JDunphy
Thu Apr 01, 2021 3:55 am
Forum: Installation and Upgrade
Topic: Solved: DANGER: 8.8.15p20 broke working machine openssl
Replies: 15
Views: 16079

Re: DANGER: 8.8.15p20 broke working machine openssl

I also punted at present but I took a snapshot of the broken zimbra instance and re-created a new VPS from that broken image to continue to debug this on. I then restored our production box back to the previous working state prior to the patch... so the pressure is off and I can get my emails and wo...
by JDunphy
Thu Apr 01, 2021 2:22 am
Forum: Installation and Upgrade
Topic: Solved: DANGER: 8.8.15p20 broke working machine openssl
Replies: 15
Views: 16079

Solved: DANGER: 8.8.15p20 broke working machine openssl

Have a RedHat 6 fully patched OS running 8.8.15 that was working flawlessly... Saw the critical update and the comments they had it working so thought I would get a head start on the weekend and do this on my home machine. I observed the following during my zmcontrol restart after the yum update dur...

Go to advanced search