Search found 14 matches

by Robstarusa
Tue Mar 27, 2018 11:43 pm
Forum: Administrators
Topic: zmproxy listening on wrong www/https port?
Replies: 2
Views: 1380

Re: zmproxy listening on wrong www/https port?

I attempted to fix this with: zimbra@xxx:~/libexec$ ./zmproxyconfig -w -a 8080:80:8443:443 -e -f -H <xxx.my.fqdn> and a "zmcontrol restart". Now I have nginx listening on 80, and "java" listening on 8080 but NOTHING listening on 443/8443. I saw nothing interesting in /var/log/zim...
by Robstarusa
Tue Mar 27, 2018 10:47 pm
Forum: Administrators
Topic: zmproxy listening on wrong www/https port?
Replies: 2
Views: 1380

zmproxy listening on wrong www/https port?

Hello everyone, I've had a Zimbra OSS edition installation since 2010. Recently, IIRC, (8.7?) Zimbra proxy is required. I've had this running a while and noticed that nginx is NOT listening on the correct ports. Is there a quick way to correct this? I noticed this after checking things out after an ...
by Robstarusa
Tue Jun 06, 2017 1:56 am
Forum: Administrators
Topic: DH 1024 bits "Weak" on Qualys test.
Replies: 4
Views: 1643

Re: DH 1024 bits "Weak" on Qualys test.

Yep I tried "clear cache" when i retested.

Anyone else have ideas? Someone MUST have run into this besides me. Are there any updates pending for the article I mentioned in my original post?
by Robstarusa
Wed May 24, 2017 10:51 pm
Forum: Administrators
Topic: DH 1024 bits "Weak" on Qualys test.
Replies: 4
Views: 1643

DH 1024 bits "Weak" on Qualys test.

I just upgraded from Zimbra 8.6.0 to 8.7.9 I've tried this article: https://wiki.zimbra.com/wiki/How_to_obtain_an_A%2B_in_the_Qualys_SSL_Labs_Security_Test and run (as user zimbra) zmdhparam set -new 2048 and then ran "zmproxyctl restart" and I still have the same issue of "weak DH k...
by Robstarusa
Wed May 24, 2017 10:33 pm
Forum: Administrators
Topic: IMAPS not working
Replies: 4
Views: 1202

Re: IMAPS not working

Are you using the reverse proxy? have you disabled TLSv1 or TLSv1.1 ?
by Robstarusa
Tue Mar 14, 2017 3:45 am
Forum: Administrators
Topic: Ubuntu 14.04 - 8.7.4 imapS issue after upgrade.
Replies: 18
Views: 4486

Re: Ubuntu 14.04 - 8.7.4 imapS issue after upgrade.

I've decided to give up for now and I've restored my pre-upgrade image from March 10th. I've lost 3 days of e-mail but at least I have a working server again.

Thanks for the help guys.
by Robstarusa
Tue Mar 14, 2017 2:51 am
Forum: Administrators
Topic: Ubuntu 14.04 - 8.7.4 imapS issue after upgrade.
Replies: 18
Views: 4486

Re: Ubuntu 14.04 - 8.7.4 imapS issue after upgrade.

That didn't help either.

I've now got the same error for the web interface so that is broken as well.

I now have no way to retreve email unless I hit port 7993 (imaps) or 8443 (web).
by Robstarusa
Mon Mar 13, 2017 11:30 pm
Forum: Administrators
Topic: Ubuntu 14.04 - 8.7.4 imapS issue after upgrade.
Replies: 18
Views: 4486

Re: Ubuntu 14.04 - 8.7.4 imapS issue after upgrade.

Well guys, I think I'm about 90% of the way there. If I connect with openssl s_client on the localhost to 7993 & do a manual login it works as such: This was executed locally on the zimbra server. $ openssl s_client -connect 192.168.75.87:7993 -crlf CONNECTED(00000003) depth=3 C = SE, O = AddTru...
by Robstarusa
Mon Mar 13, 2017 9:59 pm
Forum: Administrators
Topic: Ubuntu 14.04 - 8.7.4 imapS issue after upgrade.
Replies: 18
Views: 4486

Re: Ubuntu 14.04 - 8.7.4 imapS issue after upgrade.

Anyone have any ideas at what I should be looking at? Should I turn off the nginx proxy entirely since the redirected (imaps) 7993 port works? Edit: It seems to work from my imap client, but not for me testing via openssl. Maybe imaps isn't running on 7993 but imap is? I get this: $ openssl s_client...
by Robstarusa
Sun Mar 12, 2017 8:14 pm
Forum: Administrators
Topic: Ubuntu 14.04 - 8.7.4 imapS issue after upgrade.
Replies: 18
Views: 4486

Re: Ubuntu 14.04 - 8.7.4 imapS issue after upgrade.

I ran the zmproxconfig (line above) as user "zimbra" and it returned me to the CLI. I then did a zmcontrol restart, but it did not fix the issue.

Symptoms seem to be the same.

I appreciate the suggestions guys. Keep them coming!

Thank you,

Robert

Go to advanced search