Kolab-webadmin login failure with startssl cert

[pj at websavages.com]

Having ssl_verify_host set to true or false makes no difference. 

Cheers PJ

> On 4 Feb 2014, at 22:01, Daniel Hoffend <dh at dotlan.net> wrote:
> 
> the gist was my first version: there's an updated, much larger ssl howto now integrated into kolab-docs
> http://docs.kolab.org/howtos/secure-kolab-server.html
> 
> btw, i personally haven't enabled ssl_verify_host for the server internal kolab_wap calls.
> 
> greetings
> Daniel
> 
> ------ Originalnachricht ------
> Von: "Velzeboer, PJ" <pj at websavages.com>
> An: "Kolab Mailing List" <users at lists.kolab.org>
> Gesendet: 04.02.2014 22:57:27
> Betreff: Kolab-webadmin login failure with startssl cert
> 
>> Hi all,
>> 
>> I've refreshed the certificates on my CentOS 6 Kolab 3.1 install using certs from startssl. I loosely followed https://gist.github.com/dhoffend/7008915 to make sure the key components were using the new certificates. The only snag is that I am no longer able to login to kola-webadmin.
>> 
>> 
>> 
>> Below is what /var/log/kolab-webadmin/errors says
>> 
>> PHP Error: Login failed. Unable to connect to ssl://ssl.websavages.com:443. Error: stream_socket_client(): unable to connect to ssl://ssl.websavages.com:443 (Unknown error) (POST)
>> 
>> 
>> 
>> Below is the stanza from /etc/kolab/kolab.conf
>> 
>> [kolab_wap]
>> 
>> ssl_verify_host = true
>> 
>> sql_uri = mysql://kolab:xxxxxxxxxxxxxxxxx@localhost/kolab
>> 
>> ssl_verify_peer = true
>> 
>> skin = default
>> 
>> api_url = https://ssl.websavages.com/kolab-webadmin/api
>> 
>> 
>> 
>> Anyone any ideas?
>>