Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
NTLM SMTP auth
SMTP NTLM authentication method
Localisation updates from https://translatewiki.net.
Thanks for the reminder. Note there is: - https://pear.php.net/package/Auth_SASL This package is not maintained anymore and has been superseded. Use Auth_SASL2 instead. This being said: No, I didn't worked on it yet. But there may be some spare time in the near future for this. To be explicit about what we are talking about: The wish is, that the server side NOCC code authenticates to the SMTP and the IMAP/POP3 servers via SCRAM, right?
@oheil: Have you progressed on it? Note there is: - https://pear.php.net/package/Auth_SASL
Will try to do that. Thanks a lot again!
Perhaps this is the root cause of all the problems. Your NOCC server does not have the proper root certificate installed which are needed to verify the certificate which is shown by your smtp mail server. Have a look for example here: https://stackoverflow.com/questions/24372942/ssl-error-unable-to-get-local-issuer-certificate but there are many more if you just google the error. You should solve this issue here and revert the relaxing settings below to the stringent ones.
Good to know and thanks for your patience and effort to bring the issues up here! It's invaluable!
The first set of settings worked on port 465 with SSL.
The first set of settings worked.
This keeps throwing: Verify return code: 20 (unable to get local issuer certificate)
last change documented
added example for smtp host configuration
For a solution (still experimental) please do the following below. BEWARE: the issue with your certificate is still present, so you should try to fix your certificate or at least found out what the real problem is. But for NOCC and the SSL SMTP connection set your configuration values to: $conf->domains[$i]->smtp_allow_self_signed = false; $conf->domains[$i]->smtp_verify_peer = true; $conf->domains[$i]->smtp_verify_peer_name = false; // <-- a bit relaxed $conf->domains[$i]->smtp_peer_name = ''; $conf->domains[$i]->smtp_security_level...
Experimental solution to issue/discussion https://sourceforge.net/p/nocc/discussion/38301/thread/ac827e8c9e/?limit=25
The problem is not the smtp servers name missing in the certificate, because in this case the first error would be: Warning: stream_socket_client(): Peer certificate CN=`mail.mydomain.com' did not match expected CN=`test.mydomain.com' in C:\xampp8.2.4\htdocs\nocc-code-r2861-trunk\webmail\classes\class_smtp.php on line 110 Relaxing the smtp security context settings doesn't help neither in this case.
From your webserver (where NOCC is installed) you can run the following command: openssl s_client -connect mail.a......e.ca:465 I assume that your ssl smtp port is 465. Do you see any certificate problems in the output?
Thanks for the .htaccess hint, will do. Hm, I am unsure how to proceed with the certificate errors. Of course, port 25 is not a good work around! Can you give me more details about the certificate? Is it true that it is the same which I get when connecting https://mail.a......e.ca/ ? If yes I can try to mimic this on my installation. If yes can you pm me the servers name again, I didn't wrote it down for memory.
Going through the upgrade, a thought occurred to me that you could throw a new style .htaccess.a8 in the distribution, which works with Apache 8: #Deny access for preference files <FilesMatch "\.(session|pref|filter|contacts)$"> Require all denied </FilesMatch> Upgraded everything, merged .conf, got the same error. Unfortunately, I won't be allowed to create new accounts. Had to switch to port 25 but this is sub-optimal.
I did not have $conf->domains[$i]->smtp_security_level = -1; at all. That's normal as with new version people don't update their config to the newest version, which is typically not necessary. It's not easy to handle your issue, I can mainly only guess. It would be best if you could update to the current version (1.9.14) first. Second check all new config settings in conf.php.dist and update your config.php. (well this is a bit of work and chances are good that the error stays the same) Perhaps it...
Argh, silly me! Of course POP setting does not have anything to do with SMTP. Thanks for pointing it out! This story has a surprising continuation: the hoster tells me that the cert on their HTTPS is not the same as on their SMTP, and that SMTP should have mail. subdomain on it. I don't know how to verify that. Is there an easy way? As to the settings, smtp_verify_peer_name = false and I did not have $conf->domains[$i]->smtp_security_level = -1; at all. I set it to 0 but still got the same error...
995/pop3/ssl/novalidate-cert this switches cert validation off for receiving mails. Above errors are from sending mails via smtp. Can you check your smtp settings like: $conf->domains[$i]->smtp_allow_self_signed = true; $conf->domains[$i]->smtp_verify_peer = false; $conf->domains[$i]->smtp_verify_peer_name = true; $conf->domains[$i]->smtp_security_level = -1; The last one is probably set ot -1 for you too, which means it is not set and ssl default is on. Setting this value to 0 means "No restrictions....
I am on NOCC v1.9.13-dev. Probably after recent scheduled SSL cert renewals, my users started to get the following errors when they try to send emails: In the header of the page: Warning: stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed in classes\class_smtp.php on line 106 Warning: stream_socket_client(): Failed to enable crypto in classes\class_smtp.php on line 106 Warning: stream_socket_client():...
Thanks for looking into it! PHP is 8.1 and OpenSSL is 1.1.1p. The host URL includes :995/pop3/ssl/novalidate-cert I thought it should disable validation. How can I use TLS yet not validate the cert at all?
I am on NOCC v1.9.13-dev. Probably after recent scheduled SSL cert renewals, my users started to get the following errors when they try to send emails: In the header of the page: Warning: stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed in classes\class_smtp.php on line 106 Warning: stream_socket_client(): Failed to enable crypto in classes\class_smtp.php on line 106 Warning: stream_socket_client():...
In case it is the same certificate which I see when connecting to https://mail.a......e.ca/ : the hostname 'mail' is missing in the certificate therefor correctly seen as invalid.
PHP version and openssl version on your server may be important to know too. Check if everything is up to date.
I will have a look into it...
I am on NOCC v1.9.13-dev. Probably after recent scheduled SSL cert renewals, my users started to get the following errors when they try to send emails: In the header of the page: Warning: stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed in classes\class_smtp.php on line 106 Warning: stream_socket_client(): Failed to enable crypto in classes\class_smtp.php on line 106 Warning: stream_socket_client():...
I am on NOCC v1.9.13-dev. Probably after recent scheduled SSL cert renewals, my users started to get the following errors when they try to send emails: In the header of the page: Warning: stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed in classes\class_smtp.php on line 106 Warning: stream_socket_client(): Failed to enable crypto in classes\class_smtp.php on line 106 Warning: stream_socket_client():...
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
remove old simplepie
project webspace up to php74, upgrade simplepie
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Localisation updates from https://translatewiki.net.
Remove To: column when showing folder contents
Cache POP3 requests
independed smtp login from pop/imap
More options for RSS feed
Localisation updates from https://translatewiki.net.
Need more developers!
Auto-Update fails with php 8.2.3
sha256 for update
Still unresolved on php 8.2.4, same error.
Localisation updates from https://translatewiki.net.
wrong date for release 1.9.13
NOCC 1.9.14 released
early release 1.9.14 before people change to php 8.2
early release 1.9.14 before people change to php 8.2
early release 1.9.14 before people change to php 8.2
Bug #511 Auto-Update fails with php 8.2.3
Auto-Update fails with php 8.2.3