Zimbra Forums

Thanks for that too Mark! Wasn't aware of it. Here is it working with 8.8.15 but with the spamassassin command line tool. I run these as my own user here and not zimbra. It appears to spit the input file out to stdout with X-Spam-Status so thought I would throw out the rules that fired where j.txt w...

Thanks Mark,

Same results here... 4-5 seconds on lookups now back to normal.

Nice catch.

Jim

Once fixed, you should be able to use the standard commands to install your certificate. This. One quick solution... cd /tmp or cd since you are now the zimbra user. Reason: my $odir = Cwd::cwd(); #line 1287 ... Do some deploy stuff.... enough to screw up the certificate installation ... chdir($odi...

After walking through this again with this thread: https://forums.zimbra.org/viewtopic.php?t=72323, I decided to do what Barry did and start from scratch with the wiki page on describing this in simpler terms. That old wiki article is too detailed, too confusing, out of date, and acme.sh has changed...

I did it in a regex in postfix_header_checks at one time. I no longer do this anymore, but I had this in my notes where X.X.X.X was the internal ip address we didn't want included: # remove internal ip /^Received:.*X\.X\.X\.X.*/ REPLACE X-Received: Authenticated MUA on YYYY network There might be si...

How did this get set to true. Default is no. smtpd_tls_ask_ccert = yes The smtpd_tls_ask_ccert parameter in Postfix controls whether the Postfix SMTP server will ask remote clients for a client certificate when establishing a TLS encrypted connection. Setting smtpd_tls_ask_ccert = yes enables client...

I ran that earlier but wasn't sure what I was looking for. I imagine it's one of these or for the smtpd section. [zimbra@mx ~]$ postconf | grep -i tls smtp_enforce_tls = no smtp_tls_force_insecure_host_tlsa_lookup = no smtp_tls_mandatory_ciphers = medium smtp_tls_mandatory_protocols = smtp_tls_note...

Perhaps you can review this for me while it is still fresh in your mind.

https://wiki.zimbra.com/wiki/JDunphy-LE-Easy

Was this what you were looking for and would it have made using PKI certificates less painful?

Jim

This might help

I've been looking at this; https://wiki.zimbra.com/wiki/Cipher_suites The problem is that this is too advanced for my skill level in Zimbra. As mentioned, I run this server part time so have not become an expert at it. This is what I know; /opt/zimbra/common/bin/openssl md5 /dev/null Error setting ...