[Info] SSL/TLS requirements of the Outlook Connector

Ask your questions and get help with Zimbra's Outlook Connector.
cs8rfe
Posts: 6
Joined: Thu Aug 18, 2016 6:20 pm

[Info] SSL/TLS requirements of the Outlook Connector

Postby cs8rfe » Sun Jul 30, 2017 2:22 pm

Just for information. I was not able to find this information anywhere, so I would like to share it here.

The Outlook Connector Version 8.7.10.1711 seems to support only SSL3 and TLSv1.0. If your Zimbra Server has disabled both, the Connector will not connect and throw errors like

Code: Select all

### ERROR ### WinHttpSendRequest(xxxxx.com:443) for 'AuthRequest' at 'UserSession::Auth#1746' returned ERROR_WINHTTP_CONNECTION_ERROR after 0ms. Client network adaptor down, or ZCS not running? SendRequestIntSynchronous#1654

I recorded the connecting attempts with Wireshark and saw only SSL3 and TLS1.0 Client Helos.
After re-enabling TLS1.0 with zmprov mcf zimbraReverseProxySSLProtocols TLSv1 the Outlook Connector worked as expected.

I haven’t found any informations about TLS1.2 support but I hope this will come soon because this is security related.

If you have more information on this topic, I would be glad to hear them :)


phoenix
Ambassador
Ambassador
Posts: 25156
Joined: Fri Sep 12, 2014 9:56 pm

Re: [Info] SSL/TLS requirements of the Outlook Connector

Postby phoenix » Sun Jul 30, 2017 3:01 pm

cs8rfe wrote:I haven’t found any informations about TLS1.2 support but I hope this will come soon because this is security related.

If you have more information on this topic, I would be glad to hear them :)
Why don't you take a look in bugzilla to see if there's been any bug report or an RFE filed , if there is you can always vote on it and add your comments or file a bug report/RFE yourself or get in touch with Zimbra Support to voice your concerns.
Regards

Bill

Rspamd: A high performance spamassassin replacement

If you'd like to see this implemented in a future version of ZCS then please vote on Bugzilla entries 97706 & 108168
cs8rfe
Posts: 6
Joined: Thu Aug 18, 2016 6:20 pm

Re: [Info] SSL/TLS requirements of the Outlook Connector

Postby cs8rfe » Sun Jul 30, 2017 4:06 pm

I haven’t thought of Bugzilla, thanks.

Seems to be on low priority and not very popular but is addressing the same problem.
https://bugzilla.zimbra.com/show_bug.cgi?id=100132
https://bugzilla.zimbra.com/show_bug.cgi?id=104976

By the way, the Zimbra Migrator seems to have the same lack of TLS1.2 support.
https://bugzilla.zimbra.com/show_bug.cgi?id=107660


This could be why there is no TLS1.0 exclude in this HowTo:
https://wiki.zimbra.com/wiki/How_to_obt ... urity_Test

Return to “Zimbra Connector for Outlook”

Who is online

Users browsing this forum: No registered users and 3 guests