ajcody wrote:Not 100% sure, Maxxer and Barry are still talking about it now in IRC. Barry just asked him if he had a patch or would submit one for the bug.
Yes, it's the template that's the problem. I've just done the following on a test server and it came up fine:
Change to the templates directory and save a copy of the original file.
Code: Select all
cd /opt/zimbra/conf/nginx/templates
cp nginx.conf.web.https.default.template nginx.conf.web.https.default.template.original
Edit the following file and remove the first stanza i.e. just the code in the box below:
vi nginx.conf.web.https.default.template
Code: Select all
server {
${core.ipboth.enabled}listen [::]:${web.https.port} default_server ipv6only=off;
${core.ipv4only.enabled}listen ${web.https.port} default_server;
${core.ipv6only.enabled}listen [::]:${web.https.port} default_server;
ssl on;
ssl_protocols ${web.ssl.protocols};
ssl_prefer_server_ciphers ${web.ssl.preferserverciphers};
ssl_session_cache ${ssl.session.cachesize};
ssl_session_timeout ${ssl.session.timeout};
ssl_ciphers ${web.ssl.ciphers};
ssl_ecdh_curve ${web.ssl.ecdh.curve};
ssl_certificate ${ssl.crt.default};
ssl_certificate_key ${ssl.key.default};
ssl_verify_client ${ssl.clientcertmode.default};
ssl_verify_depth ${ssl.clientcertdepth.default};
${web.ssl.dhparam.enabled}ssl_dhparam ${web.ssl.dhparam.file};
return 444;
}
zmprov ms `zmhostname` zimbraIPMode both ; /opt/zimbra/libexec/zmiptool ; zmcontrol restart - that should all start correctly.
Mind you, I haven't yet tested it with any email - I'll be back with an answer soon.