Problems after patch 120230-08
I have installed that patch and i encountred a lot of problems. I'll start with the most important SSL imap, pop3 doesn't work. After upgrade i noticed that my ssl certification is out of date so i tried to recreate it
/opt/sun/messaging/sbin/certutil -N -d /opt/sun/messaging/config -f /opt/sun/messaging/config/sslpassword.conf
/opt/sun/messaging/sbin/certutil -S -n SampleRootCA -x -t "CTu,CTu,CTu" -s "CN=Sample Root CA, O=Sample.pl" -m 25000 -o /opt/sun/messaging/config/SampleRootCa.crt -d /opt/sun/messaging/config -f /opt/sun/messaging/config/sslpassword.conf -z /etc/passwd
/opt/sun/messaging/sbin/certutil -S -n Server-Cert -c SampleRootCA -t "u,u,u" -s "CN=sun.workgroup.Sample.pl, o=Sample.pl" -m 25001 -o /opt/sun/messaging/config/SampleSSLServer.crt -d /opt/sun/messaging/config -f /opt/sun/messaging/config/sslpassword.conf -z /etc/passwd
/opt/sun/messaging/sbin/certutil -V -u V -n SampleRootCA -d /opt/sun/messaging/config
/opt/sun/messaging/sbin/certutil -V -u V -n Server-Cert -d /opt/sun/messaging/config
/opt/sun/messaging/sbin/certutil -L -d /opt/sun/messaging/config/
/opt/sun/messaging/sbin/certutil -L -n Server-Cert -d /opt/sun/messaging/config/
/opt/sun/messaging/sbin/modutil -list -dbdir /opt/sun/messaging/config/
chown mailsrv:mail /opt/sun/messaging/config/key3.db
chown mailsrv:mail /opt/sun/messaging/config/cert8.db
Did all that steps (where Sample = my company name) and every result from that command was as before. Checked configutil:
service.imap.allowanonymouslogin = no
service.imap.banner = "%h %p service (%P %V)"
service.imap.enable = 1
service.imap.enablesslport = yes
service.imap.idletimeout = 30
service.imap.maxsessions = 4000
service.imap.maxthreads = 250
service.imap.numprocesses = 1
service.imap.plaintextmincipher = 0
service.imap.port = 143
service.imap.sslcachesize = 0
service.imap.sslport = 993
service.imap.sslusessl = yes
Everything seems fine. I checked my old old configutil entries and turned out almost all 'encryption' entries aren't there. So i added those
encryption.nscertfile = config/cert8.db
encryption.nskeyfile = config/key3.db
encryption.nsssl3 = on
encryption.nsssl3ciphers = "rsa_rc4_40_md5,rsa_rc2_40_md5,rsa_des_sha,rsa_rc4_128_md5,rsa_3des_sha"
encryption.rsa.nssslpersonalityssl = Server-Cert
But everytime i added them i had:
/opt/sun/messaging/lib/configutil -o encryption.nsssl3ciphers -v rsa_rc4_40_md5,rsa_rc2_40_md5,rsa_des_sha,rsa_rc4_128_md5,rsa_3des_sha
OK SET
WARNING: unrecognized option encryption.nsssl3ciphers has been set
So i wonder what's up, what changed between versions. It was supposed to be quick fix but it wasnt :/
My version:
Sun Java(tm) System Messaging Server 6.3-0.08 (built Jun 8 2006)
libimta.so 6.3-0.08 (built 08:28:13, Jun 8 2006)
Linux workgroup.sample.pl 2.6.12-1.1381_FC3smp #1 SMP Fri Oct 21 04:03:26 EDT 2005 i686 i686 i386 GNU/Linux
Any help will be appreciated :/
