Re: svn 14501 - TLS handshaking: SSL_accept() failed: error: ... alert unknown ca: SSL alert number 48

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



It's an open source application.  I have been trying to backtrack to initial setup and get a bak or some kind of check file to backtrace the route.  They only answer every 48 hours or so.  Lol.  

Shane Thomas
IT – North Region
Denbury Resources Inc.
Office ext.   | 4529
Office          | 307.439.1879
Mobile         | 307.462.1958
Email           | shane.thomas@xxxxxxxxxxx

"This confidential e-mail is intended solely for the use of the intended recipient. Unless expressly stated otherwise in a written communication other than in electronic form, no e-mail communication shall satisfy the requirements for a writing or constitute a contract or electronic signature."

> On Jun 14, 2015, at 7:00 PM, David C. Rankin <drankinatty@xxxxxxxxxxxxxxxxxx> wrote:
> 
>> On 06/14/2015 07:05 PM, David C. Rankin wrote:
>> Checking outgoing mail service....
>>      SMTP server OK (220 phoinix.rlfpllc.com ESMTP Postfix)
>> 
>>    I think you have nailed the issue as a 'ca' problem which makes sense with
>> the error: 'tlsv1 alert unknown ca: SSL alert number 48'. Let me know when you
>> have a chance to look into this. I'm happy to do the digging.
> 
> I think I have made progress. It looks like the problem is with the way 
> squirrelmail handles the certificate check. I made several changes and how 
> configtest.php gives the following error:
> 
> Warning: fsockopen(): Peer certificate CN=`*.rlfpllc.com' did not match expected 
> CN=`localhost' in /srv/http/htdocs/squirrelmail_501/src/configtest.php on line 
> 740 Warning: fsockopen(): Failed to enable crypto in 
> /srv/http/htdocs/squirrelmail_501/src/configtest.php on line 740 Warning: 
> fsockopen(): unable to connect to tls://localhost:993 (Unknown error) in 
> /srv/http/htdocs/squirrelmail_501/src/configtest.php on line 740
> 
> Seeing the CN mismatch, I set config_local.php with 'verify_peer' => false:
> 
> $imap_stream_options = array(
>     'ssl' => array(
>         'cafile' => '/etc/ca-certificates/extracted/tls-ca-bundle.pem',
>         'verify_peer' => false,
>         'verify_depth' => 3,
>     ),
> );
> 
> However, that made no difference. (*Note:* with php 5.6+ the default for 
> verify_peer is now 'true' -- I don't know if that prevents override in 
> config_local.php) Let me know when you have some time and I'm glad to help.
> 
> -- 
> David C. Rankin, J.D.,P.E.
> 
> ------------------------------------------------------------------------------
> -----
> squirrelmail-users mailing list
> Posting guidelines: http://squirrelmail.org/postingguidelines
> List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
> List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
> List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
------------------------------------------------------------------------------
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users




[Index of Archives]     [Video For Linux]     [Yosemite News]     [Yosemite Photos]     [gtk]     [KDE]     [Cyrus SASL]     [Gimp on Windows]     [Steve's Art]     [Webcams]

  Powered by Linux