Zimbra Forums

I attempted to fix this with: zimbra@xxx:~/libexec$ ./zmproxyconfig -w -a 8080:80:8443:443 -e -f -H <xxx.my.fqdn> and a "zmcontrol restart". Now I have nginx listening on 80, and "java" listening on 8080 but NOTHING listening on 443/8443. I saw nothing interesting in /var/log/zim...

Hello everyone, I've had a Zimbra OSS edition installation since 2010. Recently, IIRC, (8.7?) Zimbra proxy is required. I've had this running a while and noticed that nginx is NOT listening on the correct ports. Is there a quick way to correct this? I noticed this after checking things out after an ...

Yep I tried "clear cache" when i retested.

Anyone else have ideas? Someone MUST have run into this besides me. Are there any updates pending for the article I mentioned in my original post?

I just upgraded from Zimbra 8.6.0 to 8.7.9 I've tried this article: https://wiki.zimbra.com/wiki/How_to_obtain_an_A%2B_in_the_Qualys_SSL_Labs_Security_Test and run (as user zimbra) zmdhparam set -new 2048 and then ran "zmproxyctl restart" and I still have the same issue of "weak DH k...

Are you using the reverse proxy? have you disabled TLSv1 or TLSv1.1 ?

I've decided to give up for now and I've restored my pre-upgrade image from March 10th. I've lost 3 days of e-mail but at least I have a working server again.

Thanks for the help guys.

That didn't help either.

I've now got the same error for the web interface so that is broken as well.

I now have no way to retreve email unless I hit port 7993 (imaps) or 8443 (web).

Well guys, I think I'm about 90% of the way there. If I connect with openssl s_client on the localhost to 7993 & do a manual login it works as such: This was executed locally on the zimbra server. $ openssl s_client -connect 192.168.75.87:7993 -crlf CONNECTED(00000003) depth=3 C = SE, O = AddTru...

Anyone have any ideas at what I should be looking at? Should I turn off the nginx proxy entirely since the redirected (imaps) 7993 port works? Edit: It seems to work from my imap client, but not for me testing via openssl. Maybe imaps isn't running on 7993 but imap is? I get this: $ openssl s_client...

I ran the zmproxconfig (line above) as user "zimbra" and it returned me to the CLI. I then did a zmcontrol restart, but it did not fix the issue.

Symptoms seem to be the same.

I appreciate the suggestions guys. Keep them coming!

Thank you,

Robert