Problem with https and roundcube

[Iman Nuraev]

Yes, i don't need ssl for roundcube, but i'd like to use it for mail client
(thunderbird)
I've tried 143. The same problem.

On Wed, Oct 15, 2014 at 12:12 PM, Enrico Tagliavini <
enrico.tagliavini at gmail.com> wrote:

> A couple of things here:
>
> 1. Since the IMAP server is on the same machine as roundcube (at leat that
> seems to be the case) you don't need SSL / TLS for IMAP connection. Not
> using it will make it faster
>
> 2. To my knowledge port 993 is deprecated and should not be used anymore.
> You should use port 143, which supports also starttls in case you need
> encrypted connection when the IMAP server and the client are not on the
> same machine.
>
> Best regards
> Enrico
>
> On 15 October 2014 00:01, Iman Nuraev <nuraev at gmail.com> wrote:
>
>> Enrico and Mariusz, thank you!
>>
>> I've added rewrite rule and  <Directory> from roundcubemail.conf to
>> nss.conf. Now roundcube login screen displayed correctly, but every attempt
>> of login ends with message "login failed".
>>
>> /var/log/roundcubemail/userlogin contains only:
>> [14-Oct-2014 21:40:28,000000 +0200]: <1iafbkbb> Failed login for
>> test.test@***.com from *** in session 1iafbkbbrhbrahv0g3lulv6c25 (error:
>> 0)
>>
>>
>> /var/log/kolab/pykolab.log contains:
>>
>> 2014-10-14 23:40:34,222 pykolab.imap WARNING
>> Could not connect to Cyrus IMAP server 'imaps://localhost:993'
>>
>> 2014-10-14 23:40:44,236 pykolab.imap WARNING
>> Could not connect to Cyrus IMAP server 'imaps://localhost:993'
>>
>> 2014-10-14 23:40:54,250 pykolab.imap WARNING
>> Could not connect to Cyrus IMAP server 'imaps://localhost:993'
>>
>>  Check of imap (like it recommended in
>> https://docs.kolab.org/howtos/secure-kolab-server.html):
>>
>> # openssl s_client -showcerts -connect localhost:993
>> CONNECTED(00000003)
>> 140562498885448:error:140770FC:SSL
>> routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:766:
>> ---
>> no peer certificate available
>> ---
>> No client certificate CA names sent
>> ---
>> SSL handshake has read 7 bytes and written 263 bytes
>> ---
>> New, (NONE), Cipher is (NONE)
>> Secure Renegotiation IS NOT supported
>> Compression: NONE
>> Expansion: NONE
>> ---
>>
>>
>>
>>
>>
>>
>>
>> */etc/imapd.conf contains:tls_cert_file: /etc/pki/tls/certs/*.com.crttls_key_file: /etc/pki/tls/private/*.com.keytls_ca_file: /etc/pki/tls/certs/*.com.ca-chain.pem*
>>
>> Is there any solution?
>>
>>
>>
>>
>> 2014-10-14 11:00 GMT+04:00 Mariusz Piasecki <mariusz.piasecki at extranet.pl
>> >:
>>
>>>  You should look to rewrite rule. they're prepare for alias -
>>> hostname/webmail.
>>>
>>> W dniu 2014-10-10 o 23:32, Iman Nuraev pisze:
>>>
>>>   Hello!
>>>
>>> I have trouble same to
>>> http://lists.kolab.org/pipermail/users/2014-September/017832.html ,
>>> but have only nss.conf, not ssl.conf. I'm new to apache. Can anybody
>>> explain what can i do to handle this situation?
>>>  Thank you!
>>>
>>> Best regards,
>>>  Iman
>>>
>>>
>>> _______________________________________________
>>> users mailing listusers at lists.kolab.orghttps://lists.kolab.org/mailman/listinfo/users
>>>
>>>
>>>
>>> --
>>> Pozdrawiam
>>> [name] Mariusz Piasecki
>>> [job] System Administrator
>>> [e-mail] mariusz.piasecki at extranet.pl
>>> [office] +48 56 61-97-520
>>> [fax] +48 56 56 61-97-518
>>> [www] http://www.extranet.pl
>>>
>>>
>>> ===============================
>>> Jeżeli nie jest Pani/Pan adresatem tej wiadomości prosimy o poinformowanie nadawcy o jej otrzymaniu oraz niezwłoczne usunięcie treści wiadomości.   Ta wiadomość może zawierać informacje poufne.
>>> Uprzejmie informujemy, iż kopiowanie, ujawnianie, dystrybuowanie, udostępnianie lub inne wykorzystywanie wiadomości jest zabronione i może rodzić konsekwencje prawne dla osoby naruszającej zakaz.
>>>
>>>
>>> _______________________________________________
>>> users mailing list
>>> users at lists.kolab.org
>>> https://lists.kolab.org/mailman/listinfo/users
>>>
>>
>>
>> _______________________________________________
>> users mailing list
>> users at lists.kolab.org
>> https://lists.kolab.org/mailman/listinfo/users
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kolab.org/pipermail/users/attachments/20141015/4a360260/attachment.html>