[ZCS 8.8.15] proxy redirects from 80 to 8443 not to 443

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
wodel
Advanced member
Advanced member
Posts: 52
Joined: Sat Sep 13, 2014 12:24 am

[ZCS 8.8.15] proxy redirects from 80 to 8443 not to 443

Post by wodel »

Hi,

We upgraded from Zimbra from 8.8.6 to 8.8.15, we configured the proxy mode to : redirect, but when we test the redirection, we get https://mail.example.com:8443 a redirection to 8443 not to 443.
Testing https directly works perfectly.

We did set this variables :

Code: Select all

zimbra@mail:~$ zmprov mcf zimbraPublicServiceHostname $(hostname)
zimbra@mail:~$ zmprov mcf zimbraPublicServiceProtocol https
zimbra@mail:~$ zmprov mcf zimbraPublicServicePort 443

And we got this configuration

Code: Select all

zimbra@mail:~$ zmprov gs $(zmhostname) zimbraReverseProxySSLToUpstreamEnabled zimbraReverseProxyLookupTarget zimbraReverseProxyHttpEnabled zimbraMailReferMode zimbraMailPort zimbraMailProxyPort zimbraMailSSLPort  zimbraMailSSLProxyPort zimbraMailMode zimbraReverseProxyMailEnabled zimbraReverseProxyMailMode zimbraImapBindPort zimbraImapProxyBindPort zimbraImapSSLBindPort zimbraImapSSLProxyBindPort zimbraImapCleartextLoginEnabled zimbraPop3BindPort zimbraPop3ProxyBindPort zimbraPop3SSLBindPort zimbraPop3SSLProxyBindPort zimbraPop3CleartextLoginEnabled zimbraAdminPort zimbraAdminProxyPort zimbraReverseProxyAdminEnabled ; zmprov gs $(zmhostname) zimbraServiceEnabled | egrep 'memcache|proxy|mailbox'
# name mail.example.com
zimbraAdminPort: 7071
zimbraAdminProxyPort: 9071
zimbraImapBindPort: 7143
zimbraImapCleartextLoginEnabled: TRUE
zimbraImapProxyBindPort: 143
zimbraImapSSLBindPort: 7993
zimbraImapSSLProxyBindPort: 993
zimbraMailMode: https
zimbraMailPort: 8080
zimbraMailProxyPort: 80
zimbraMailReferMode: reverse-proxied
zimbraMailSSLPort: 443
zimbraMailSSLProxyPort: 8443
zimbraPop3BindPort: 7110
zimbraPop3CleartextLoginEnabled: TRUE
zimbraPop3ProxyBindPort: 110
zimbraPop3SSLBindPort: 7995
zimbraPop3SSLProxyBindPort: 995
zimbraReverseProxyAdminEnabled: TRUE
zimbraReverseProxyHttpEnabled: TRUE
zimbraReverseProxyLookupTarget: TRUE
zimbraReverseProxyMailEnabled: TRUE
zimbraReverseProxyMailMode: redirect
zimbraReverseProxySSLToUpstreamEnabled: TRUE

zimbraServiceEnabled: memcached
zimbraServiceEnabled: proxy
zimbraServiceEnabled: mailbox

I think the "set $sslport 8443;" is the problem it should be "set $sslport 443;", but I don't know how to correct it since zconfigd will revert it to its actual value

Code: Select all

zimbra@mail:~/conf/nginx/includes$ cat nginx.conf.web.http.mode-redirect
# Redirect Mode Configuration For HTTP

            set $sslport 8443;
            set $sslhost $host;

            if ($sslport != 443) # Standard SSL Port
            {
                set $sslhost $host:$sslport;
            }

            rewrite ^/(.*)$ https://$sslhost/$1 redirect;
any ideas?

Regards.
Post Reply