Server cannot be connected over ssl

Installed self-signed certificate on the Messaging Server. And started up the messaing server with ssl.

"netstat " shows port 993 is idle. But seems cannot connect to it .

The messaing server was running on a standalone machine, not network connective.

Does ssl require connections over the network?

Thanks!

[341 byte] By [oliver_zhang] at [2007-11-26 9:14:16]
# 1

> Installed self-signed certificate on the Messaging

> Server. And started up the messaing server with ssl.

"started the messaging serve with ssl". Means what?

Did you make the configutil settings to turn any of the ssl functions on?

Did you edit the sslpassword.conf file to add the password for the certificate database?

Did you make a typo? The default name of the cert is "Server-Cert". "server-cert" is not the same, as it's case sensitive.

Did you examine any of the logs and see errors on the restart?

I don't even know what version Messaging you're running. Frankly, you've a whole bunch of homework to do before I can be much help.

jay

>

>

> "netstat " shows port 993 is idle. But seems cannot

> connect to it .

>

> The messaing server was running on a standalone

> machine, not network connective.

>

> Does ssl require connections over the network?

>

> Thanks!

jay_plesset at 2007-7-6 23:38:05 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 2

Jay, Thanks for your reply!

Actually, this post is an following up of my previous post.

Yes, it seems everything has been configured.

I checked imta, imap logs, there is no errors.

The only thing that I can think about is if ssl supports client and server on the same machine? !!

Anything else you think I might check?

Thanks!

oliver_zhang at 2007-7-6 23:38:05 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 3
Either the server is listening on ssl ports, or it is not listening.Has nothing to do with network connectivity.You might want to post the output from running configutil, here.
jay_plesset at 2007-7-6 23:38:05 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 4

Thanks,

configutil shows:

local.ldapuserssl = true

local.ssldbpatch = /var/opt/SUNWmsgsr1/config

local.usessl =true

service.imap.sslport = 993

service.imap.uslusessl = yes

encryption.rsa.nssslpersonalityssl = Server-Cert

encryption.rsa.nssslactivaton = on

I cannot see something wrong here. Please let me know if need to see others

oliver_zhang at 2007-7-6 23:38:05 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 5
Also,netstat shows port 993 is idle. Is that need to show "Listen"? Thanks!
oliver_zhang at 2007-7-6 23:38:05 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 6

Well, I kind of hoped you'd paste the whole thing,here.

but,

local.ldapuserssl = true

tells your server to connect to the config ldap server via SSL. If it's not able to do that, then you will not be able to run your messaging server properly.

You're sure that the IMAP log shows no errors on startup?

jay_plesset at 2007-7-6 23:38:05 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 7
Thanks for your help.I thought I enabled the imap.sslport, but it actually was "no". Stupid.Now seems everything works.
oliver_zhang at 2007-7-6 23:38:05 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 8
It's always something, isn't it? Glad it's working for you, now.
jay_plesset at 2007-7-6 23:38:05 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...