Search found 31 matches

by johnroberts
Thu Oct 16, 2014 8:19 am
Forum: Administrators
Topic: Poodle - SSLv3 still active on SMTP-SSL (port 465) after using Wiki to disable
Replies: 4
Views: 1167

Poodle - SSLv3 still active on SMTP-SSL (port 465) after using Wiki to disable

Thanks a lot, the missing line (now in the Wiki) was:


postconf -e smtpd_tls_mandatory_protocols='!SSLv2,!SSLv3'


SSLv3 is now also refused on port 465.

by johnroberts
Thu Oct 16, 2014 4:21 am
Forum: Administrators
Topic: Poodle - SSLv3 still active on SMTP-SSL (port 465) after using Wiki to disable
Replies: 4
Views: 1167

Poodle - SSLv3 still active on SMTP-SSL (port 465) after using Wiki to disable

Hi, We have used the Wiki entry: https://wiki.zimbra.com/wiki/How_to_disable_SSLv3 to disable SSLv3 in Zimbra 8.5 (3042 patch 8.5.0_P2) with Proxy For the MTA we ran: zmprov mcf zimbraMtaSmtpdTlsProtocols '!SSLv2,!SSLv3' as zimbra then restarted, and checked on port 25 with: openssl s_client...
by johnroberts
Fri Oct 03, 2014 1:55 am
Forum: Administrators
Topic: After 8.0.8 to 8.5.0 domain certificates per IP are being overridden with mail server certificate
Replies: 10
Views: 1436

After 8.0.8 to 8.5.0 domain certificates per IP are being overridden with mail server certificate

Thank you very much, this fixed the problem. Could I just ask a final question, should we reverse this fix prior to installing the future Patch 2? For others with the same issue, the exact changes were:- The files to change are read only so you will need to add write access, as zimbra user, with: ch...
by johnroberts
Thu Oct 02, 2014 5:59 pm
Forum: Administrators
Topic: After 8.0.8 to 8.5.0 domain certificates per IP are being overridden with mail server certificate
Replies: 10
Views: 1436

After 8.0.8 to 8.5.0 domain certificates per IP are being overridden with mail server certificate

Ok great thank you.



Unfortunately I can't see comments c6 and c7 on that page, only c1, c9, c10 and c12 so can't see the workarounds.



Do I need to create a Bugzilla login to see them?
by johnroberts
Thu Oct 02, 2014 5:04 pm
Forum: Administrators
Topic: After 8.0.8 to 8.5.0 domain certificates per IP are being overridden with mail server certificate
Replies: 10
Views: 1436

After 8.0.8 to 8.5.0 domain certificates per IP are being overridden with mail server certificate

Thank you very much for the response. I don't know if you are linked with Zimbra, but do you know when we might see 8.5 Patch2? The following files are reportedly affected: /opt/zimbra/main/ZimbraServer/conf/nginx/nginx.conf.mail.imap.template /opt/zimbra/main/ZimbraServer/conf/nginx/nginx.conf....
by johnroberts
Thu Oct 02, 2014 12:51 pm
Forum: Administrators
Topic: After 8.0.8 to 8.5.0 domain certificates per IP are being overridden with mail server certificate
Replies: 10
Views: 1436

After 8.0.8 to 8.5.0 domain certificates per IP are being overridden with mail server certificate

I noticed in the 'nginx.log' log file that before the upgrade it logged, for example: 2014/09/28 23:07:11 [info] 14970#0: *43238 client 100.100.100.100 connected to 10.10.10.10:993 since upgrading to 8.5.0 it now logs: 2014/10/02 15:04:19 [info] 19778#0: *25472 client 100.100.100.100:31398 c...
by johnroberts
Thu Oct 02, 2014 11:56 am
Forum: Administrators
Topic: After 8.0.8 to 8.5.0 domain certificates per IP are being overridden with mail server certificate
Replies: 10
Views: 1436

After 8.0.8 to 8.5.0 domain certificates per IP are being overridden with mail server certificate

Hi, Just to add to the above. A full 'zmprov gd mail.example2.com' shows the correct complete combined certificate and key of the virtual domain. Also: 'zmprov gd mail.example2.com | grep Virtual' shows correctly: zimbraVirtualHostname: mail.example2.com zimbraVirtualIPAddress: 10.10...
by johnroberts
Thu Oct 02, 2014 10:33 am
Forum: Administrators
Topic: After 8.0.8 to 8.5.0 domain certificates per IP are being overridden with mail server certificate
Replies: 10
Views: 1436

After 8.0.8 to 8.5.0 domain certificates per IP are being overridden with mail server certificate

Hi All, We have just upgraded from 8.0.8 to 8.5 Prior to the upgrade everything was working well with the machine having 2 additional IP addresses and the proxy setup to handle https connections for two extra domains. For example: Main server: mail.example.com (on 10.10.10.1) IP2: mail.example2.com ...
by johnroberts
Tue Aug 14, 2012 11:26 am
Forum: Mobility
Topic: Z-Push Zimbra Backend (Push Email, Contacts, Appointments & Tasks)
Replies: 1075
Views: 267676

Z-Push Zimbra Backend (Push Email, Contacts, Appointments & Tasks)

[QUOTE]If you setup a new z-push-2 installation, then download the z-push-2 backend version from the SVN on the sourceforge site, and copy the BACKEND_PROVIDER and all the ZIMBRA_ settings from your z-push 1.5 config.php over to the new config.php you will be ready to start. Follow the instructions ...
by johnroberts
Mon Aug 13, 2012 6:55 am
Forum: Mobility
Topic: Z-Push Zimbra Backend (Push Email, Contacts, Appointments & Tasks)
Replies: 1075
Views: 267676

Z-Push Zimbra Backend (Push Email, Contacts, Appointments & Tasks)

[QUOTE]If you look at my earlier post #843, I used a combination of Rel 53 files and most recent files from repository, plus some minor modification documented and linked in this thread. Working quite nicely with Z-Push 2.0.1 on a separate and virtual machine runnning Ubtuntu 10.04.04.[/QUOTE]Any ch...

Go to advanced search