Server cannot be connected over ssl
Installed self-signed certificate on the Messaging Server. And started up the messaing server with ssl.
"netstat " shows port 993 is idle. But seems cannot connect to it .
The messaing server was running on a standalone machine, not network connective.
Does ssl require connections over the network?
Thanks!
# 1
> Installed self-signed certificate on the Messaging
> Server. And started up the messaing server with ssl.
"started the messaging serve with ssl". Means what?
Did you make the configutil settings to turn any of the ssl functions on?
Did you edit the sslpassword.conf file to add the password for the certificate database?
Did you make a typo? The default name of the cert is "Server-Cert". "server-cert" is not the same, as it's case sensitive.
Did you examine any of the logs and see errors on the restart?
I don't even know what version Messaging you're running. Frankly, you've a whole bunch of homework to do before I can be much help.
jay
>
>
> "netstat " shows port 993 is idle. But seems cannot
> connect to it .
>
> The messaing server was running on a standalone
> machine, not network connective.
>
> Does ssl require connections over the network?
>
> Thanks!
# 2
Jay, Thanks for your reply!
Actually, this post is an following up of my previous post.
Yes, it seems everything has been configured.
I checked imta, imap logs, there is no errors.
The only thing that I can think about is if ssl supports client and server on the same machine? !!
Anything else you think I might check?
Thanks!
# 3
Either the server is listening on ssl ports, or it is not listening.Has nothing to do with network connectivity.You might want to post the output from running configutil, here.
# 4
Thanks,
configutil shows:
local.ldapuserssl = true
local.ssldbpatch = /var/opt/SUNWmsgsr1/config
local.usessl =true
service.imap.sslport = 993
service.imap.uslusessl = yes
encryption.rsa.nssslpersonalityssl = Server-Cert
encryption.rsa.nssslactivaton = on
I cannot see something wrong here. Please let me know if need to see others
# 5
Also,netstat shows port 993 is idle. Is that need to show "Listen"? Thanks!
# 6
Well, I kind of hoped you'd paste the whole thing,here.
but,
local.ldapuserssl = true
tells your server to connect to the config ldap server via SSL. If it's not able to do that, then you will not be able to run your messaging server properly.
You're sure that the IMAP log shows no errors on startup?
# 7
Thanks for your help.I thought I enabled the imap.sslport, but it actually was "no". Stupid.Now seems everything works.
# 8
It's always something, isn't it? Glad it's working for you, now.