From owner-freebsd-ports@FreeBSD.ORG Mon Mar 2 10:19:11 2015 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 3339A4E5 for ; Mon, 2 Mar 2015 10:19:11 +0000 (UTC) Received: from mail-pa0-x232.google.com (mail-pa0-x232.google.com [IPv6:2607:f8b0:400e:c03::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id EFCDACC1 for ; Mon, 2 Mar 2015 10:19:10 +0000 (UTC) Received: by padfa1 with SMTP id fa1so6940054pad.3 for ; Mon, 02 Mar 2015 02:19:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:message-id:date:from:reply-to:user-agent:mime-version:to :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=Y1qYxhpKMMFcm5fbyC+8yZcVXQT/9QzUWk1eXsyQ70s=; b=Uk0xOYI7fiqTH0v4JhBFeKNd+N+6UFNdBYkR58scZddJ2VfIV/EuTcdGAQB2k014N3 XttNRY/2JfeVwgmCmkvejD917b2aTWiPfU24qquZN8ggEQDbq7LCcplj2ncYGvkC2Io6 eoLn22ic9roKTP8VGEh1SCo2yOI7LbYFK3079wB0aY056NrkRCi7WAHqJN6XcY2w5SCu soE5VD9CnwBOTf08OgXmYBA1BmE5xAKiUDXHBNDIObgrq1D6dpIGVuSu4hG7xlJDlvWE XhLY86Ou/iCsZTEOjl/qAbSLSIyop2IcJjD4ULg/84wmysavA/zrYEL+GA4bnGdlJrU9 gX6w== X-Received: by 10.68.215.65 with SMTP id og1mr45793660pbc.79.1425291550470; Mon, 02 Mar 2015 02:19:10 -0800 (PST) Received: from [192.168.1.104] (ppp59-167-128-11.static.internode.on.net. [59.167.128.11]) by mx.google.com with ESMTPSA id du13sm11472696pdb.65.2015.03.02.02.19.08 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 02 Mar 2015 02:19:09 -0800 (PST) Sender: Kubilay Kocak Message-ID: <54F43917.8070509@FreeBSD.org> Date: Mon, 02 Mar 2015 21:19:03 +1100 From: Kubilay Kocak Reply-To: koobs@FreeBSD.org User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:36.0) Gecko/20100101 Thunderbird/36.0 MIME-Version: 1.0 To: =?UTF-8?Q?Marko_Cupa=c4=87?= , freebsd-ports@freebsd.org Subject: Re: mail/roundcube selfsigned TLS problem after upgrade to php56 (SOLVED) References: <20150302095605.52fcd10c@efreet> <20150302101511.63ff8eca@efreet> In-Reply-To: <20150302101511.63ff8eca@efreet> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Mar 2015 10:19:11 -0000 On 2/03/2015 8:15 PM, Marko Cupać wrote: > On Mon, 2 Mar 2015 09:56:05 +0100 > Marko Cupać wrote: > >> Hi, >> >> my roundcube was connecting happily to dovecot2 server over TLS >> for a few years, until recent upgrade of php ports (5.4 -> 5.6) and >> roundcube (1.0.5 -> 1.1.0). >> >> Luckily, all I needed to add to roundcube config was: >> >> $config['imap_conn_options'] = array( >> 'ssl' => array( >> 'verify_peer' => true, >> 'verify_depth' => 3, >> 'cafile' => '/etc/ssl/public/dovecot.pem', >> ), >> ); >> >> I found this information on archlinux forums: >> https://bbs.archlinux.org/viewtopic.php?id=193012 >> >> Hope this saves some time to someone, I had my webmail non-functional >> longer than I'd like to because of this change. >> >> Regards, > > Similar goes for managesieve plugin: > $config['managesieve_conn_options'] = array( > 'ssl' => array( > 'verify_peer' => true, > 'verify_depth' => 3, > 'cafile' => '/etc/ssl/public/dovecot.pem', > ), > ); > > Probably also for all other plugins that have something to do with TLS. > Perhaps there's something that can be improved in ports if someone would like to create an issue in Bugzilla, ideally with a patch. Perhaps a pkg-message? Perhaps a section, example, or note in the configuration .sample? -- koobs