We upgraded from Zimbra from 8.8.6 to 8.8.15, we configured the proxy mode to : redirect, but when we test the redirection, we get https://mail.example.com:8443 a redirection to 8443 not to 443.
Testing https directly works perfectly.
We did set this variables :
Code: Select all
zimbra@mail:~$ zmprov mcf zimbraPublicServiceHostname $(hostname)
zimbra@mail:~$ zmprov mcf zimbraPublicServiceProtocol https
zimbra@mail:~$ zmprov mcf zimbraPublicServicePort 443
And we got this configuration
Code: Select all
zimbra@mail:~$ zmprov gs $(zmhostname) zimbraReverseProxySSLToUpstreamEnabled zimbraReverseProxyLookupTarget zimbraReverseProxyHttpEnabled zimbraMailReferMode zimbraMailPort zimbraMailProxyPort zimbraMailSSLPort zimbraMailSSLProxyPort zimbraMailMode zimbraReverseProxyMailEnabled zimbraReverseProxyMailMode zimbraImapBindPort zimbraImapProxyBindPort zimbraImapSSLBindPort zimbraImapSSLProxyBindPort zimbraImapCleartextLoginEnabled zimbraPop3BindPort zimbraPop3ProxyBindPort zimbraPop3SSLBindPort zimbraPop3SSLProxyBindPort zimbraPop3CleartextLoginEnabled zimbraAdminPort zimbraAdminProxyPort zimbraReverseProxyAdminEnabled ; zmprov gs $(zmhostname) zimbraServiceEnabled | egrep 'memcache|proxy|mailbox'
# name mail.example.com
zimbraAdminPort: 7071
zimbraAdminProxyPort: 9071
zimbraImapBindPort: 7143
zimbraImapCleartextLoginEnabled: TRUE
zimbraImapProxyBindPort: 143
zimbraImapSSLBindPort: 7993
zimbraImapSSLProxyBindPort: 993
zimbraMailMode: https
zimbraMailPort: 8080
zimbraMailProxyPort: 80
zimbraMailReferMode: reverse-proxied
zimbraMailSSLPort: 443
zimbraMailSSLProxyPort: 8443
zimbraPop3BindPort: 7110
zimbraPop3CleartextLoginEnabled: TRUE
zimbraPop3ProxyBindPort: 110
zimbraPop3SSLBindPort: 7995
zimbraPop3SSLProxyBindPort: 995
zimbraReverseProxyAdminEnabled: TRUE
zimbraReverseProxyHttpEnabled: TRUE
zimbraReverseProxyLookupTarget: TRUE
zimbraReverseProxyMailEnabled: TRUE
zimbraReverseProxyMailMode: redirect
zimbraReverseProxySSLToUpstreamEnabled: TRUE
zimbraServiceEnabled: memcached
zimbraServiceEnabled: proxy
zimbraServiceEnabled: mailbox
I think the "set $sslport 8443;" is the problem it should be "set $sslport 443;", but I don't know how to correct it since zconfigd will revert it to its actual value
Code: Select all
zimbra@mail:~/conf/nginx/includes$ cat nginx.conf.web.http.mode-redirect
# Redirect Mode Configuration For HTTP
set $sslport 8443;
set $sslhost $host;
if ($sslport != 443) # Standard SSL Port
{
set $sslhost $host:$sslport;
}
rewrite ^/(.*)$ https://$sslhost/$1 redirect;
Regards.