How to disable ssl in messenger express

Our ssl cert is about to expire. We applied a new one yesterday
and it worked. But after a restart of the system, we could not
get the webmail working.
We have no time to investigate now. So it might be simpler
to disable the ssl in httpd, i.e. reverting to the original
http://our.mail.system
(instead of https://our.mail.system)
Note: right now
all
http:// are automatically switched to https://
Pls tell me to way to disable it
Thanks

In UWC set uwcauth.ssl.authonly=false in /var/opt/SUNWuwc/WEB-INF/config/uwcauth.properties file and restart web container.

Similar Messages

How to disable SSL v3 for sun os 5.6 (OAS 4.0.8), I am facing POODLE vulnerability issue?

my Website is hosted on Sun OS 5.06 (OAS 4.0.8) and using web server : Oracle_Web_Listener/4.0.8. Website is configured to use https for secure pages and it was working fine from last 10 years but suddenly i am getting complaints from my customers that they can not browse site on chrome version 40 and above and firefox 34 and above.
I searched for this issue and found that there is POODLE attack which may causing this issue. now the only solution i can see is to disable SSL v3 on server.
Can any help me out with the process or an idea, How to disable SSL V3 on this Olde server? its sun microsystem server.

Hi Aamir,
   This is old software, been a while since I saw one of these.
    Normally when SSL was setup there were two listeners, one with SSL and one without, in a different port, so you could try to find this second port, which may work without any need to change the configuration.
    Else, try to check on the OAS manager (Usually on port 8888), the HTTP listener -> WWW -> Network, if there is a setup only for the SSL port, you will need to add a new line, with the same configuration, but a different port and the security disabled.
    Also, there may be some setting on the application itself for the url path. If so, when you navigate in the application it will try to redirect you back to the SSL port. In that case you will need to figure out where to change that, which depend on the application itself.
   Found this page on google with the process to setup SSL on OAS 4.0, you need to do the inverse of step 5.
WoSign Support: SSL Certificates Installation Instruction - Oracle Web Server (OAS 4.0.8)
Regards,
Luis

How to disable SSL renegotiation in weblogic 10.3

Hi,
Can someone advise how to disable the SSL renegotiation in weblogic 10.3 server with jdk 1.6.0_35-b10 or 1.6.0_07-b06?
I tried to set up below properties when starting up weblogic server. But didn't work.
-Dweblogic.security.disableNullCipher=true -Dweblogic.ssl.AllowUnencryptedNullCipher=false -Dweblogic.security.ssl.enable.renegotiation=false -Dssl.debug=true -Dsun.security.ssl.allowUnsafeRenegotiation=false -Dsun.security.ssl.allowLegacyHelloMessages=false
Really appreciate if anyone can give any advise.

Thanks PratikS.
I tried to apply such patch in weblogic10.3.0. But got below NoSuchMethodError. Any idea? Any other patch needed?
<Jun 3, 2013 1:25:49 PM CST> <Critical> <WebLogicServer> <BEA-000386> <Server subsystem failed. Reason: java.lang.NoSuchMethodError:weblogic.protocol.ServerChannel.getConfig()Lweblogic/management/configuration/NetworkAccessPointMBean;
java.lang.NoSuchMethodError: weblogic.protocol.ServerChannel.getConfig()Lweblogic/management/configuration/NetworkAccessPointMBean;
at weblogic.security.utils.SSLContextManager.getChannelSSLContext(SSLCon
textManager.java:234)
at weblogic.security.utils.SSLContextManager.getSSLServerSocketFactory(S
SLContextManager.java:89)
at weblogic.server.channels.DynamicSSLListenThread.<init>(DynamicSSLList
enThread.java:59)
at weblogic.server.channels.DynamicListenThreadManager.createListener(Dy
namicListenThreadManager.java:289)
at weblogic.server.channels.DynamicListenThreadManager.start(DynamicList
enThreadManager.java:129)
Truncated. see log file for complete stacktrace
>

How to disable SSL Renegotiation

Hi All,
A security audit discovered one of our application's SSL termination, resides our ACE, supports SSL Renegotiation, which is, in their opinion, a security risk. As far I know, it is not supported to turn off this feature on ACE. Anyway, I want to be sure, before I reports this to the auditors. If you know, how to disable it, please share with me!
We are running 3.0(0)A4(2.2).
Regards,
Tamas

Thank you for your answer.
Our running version is A5(2.0). It should have rehandshake disabled by default.
Here are the outputs from some commands:
ACE# sh run | i rehand
Generating configuration....
ACE# sh parameter-map SSL_TERMINATION
Parameter-map : SSL_TERMINATION
Description : -
Type : ssl
    version                            : all
    close-protocol                     : none
    expired-crl                        : allow
    cdp-errors                         : reject
    authentication-failure any         : reject
    session-cache timeout              : disabled
    queue-delay timeout                : disabled
    Accepted cipher list:
      RSA_WITH_RC4_128_MD5 (priority:1)
      RSA_WITH_RC4_128_SHA (priority:1)
      RSA_WITH_AES_128_CBC_SHA (priority:10)
      RSA_WITH_AES_256_CBC_SHA (priority:1)
    rehandshake                        : disabled
    purpose-check                      : enabled
As you can see there is no configuration command to activate rehandshake.
So my question is if the rehandshake command only affects the ACE´s ability to do a rehandshake from its own side, but always lets the client do it if it wants to.
It isn't easy to find details about this. And the only place where I have found i little bit of details says "Enables rehandshake, allowing the ACE to send an SSL HelloRequest message to its peer to restart SSL handshake negotiation", so it might just be in that direction.
A followup question would be if it is possible to prevent the client from doing a rehandshake by a command in the ACE.
If this behaviour is not the intention this has to be a bug and I would go to the TAC with it.
I just want to know how the ACE is intended to work before I do that.
Best Regards,
/Torbjörn

ILOM, how to disable SSL v2?

Hello
Is there any possibility to disable SSL v2?
I want to use HTTPS to connect to the server (Java Console) but it have to use SSL v3 only. Once trying to connect with v2 of SSL connection should not be established.
Is there any possibility to do this?
SP Firmware Version is: 3.0.3.20.e
SP Filesystem Version 0.1.22
Edited by: Luceks on Sep 2, 2009 4:28 AM

Hi.
You should have a SSL section under:
1) Log in to the ILOM-SP WEB interface.
2) Click --> Management --> SSL (or similar...)
3)
The SSL page appears. There're some sections to the SSL page.
One section includes targets and properties and you can configure the SSL settings displayed
in this section page (example):
**SSL**
State = Enabled | Disabled
Roles = Administrator | Operator | Advanced | (none)
Address = 0.0.0.0
Port = 0
4) Save settings page, to save any changes made to this section.
s.

How to disable SSL V3 via GPO on a win2008R2 server

Hi everyone
because of this new Poodle threat involving SSL v3, I need to disable SLL v3 on our network, via Group policy.
There's plenty of post on how to do this ie
https://technet.microsoft.com/library/security/3009008.aspx
But the problem is, the option needed, isnt available!
II need to find the option Turn off Encryption Support .
I can do this using a local GPO, but as soon as I jump on the DC, and go to the same settings, its not there.
This is a Win2008 R2 server based network, running IE10 and IE11.
I've tried adding the GPO templates for both IE10 and IE11, but there appears to be no difference, the option is still missing,
anyone got any ideas?
thanks
G.

I updated the admx and adml files in my central store to IE 11 ones and it added the option. Hope that helps. http://www.microsoft.com/en-us/download/details.aspx?id=40905

How to Disable wireless on my Express?

I'm in the process of setting up a Sonos sound system in the house. Need to disable wireless on my ape. Running lates software/IOS.
Don't seem to find the previous option to disable the wireless net on my ape?

What version of AirPort Utility are you using to configure the AirPort Express?
If you are not sure, click the AirPort Utility menu in the upper left corner of the screen.
Then click About AirPort Utility to find the info.

How to install sieve filters in Messenger Express ?

Sun Java(tm) System Messaging Server 6.2-3.04 (built Jul 15 2005)
libimta.so 6.2-3.04 (built 01:32:55, Jul 15 2005)
SunOS amd-7-1 5.10 Generic_Patch_118844-30 i86pc i386 i86pc
There is a lot of information about filters and sieve in the manuals but I didn't find how to activate filters in Messenger Express.
With UWC, I have a "Mail Filters" in the option tab but not in Messenger Express (except vacation).
What should I do ?
We are working with frontend and MEM
I also see a topics about MEM & Mail Filter but nothing about how to deploy the mail filter.
Thanks

I'm not sure to understand.
What is the signification of "the backend must be set correctly" ?
The web container (Web server 6.1) and MailFilter are installed on the frontend and it works
with local.webmail.sieve.port =81 (both on front- and back-end).
Should I install the web server and MailFilter on the backend ?

How to disable sslv2 on windows server 2008 r2

we are getting alerts from our third party application regarding the vulnerability error in our doamin.they mentiojn the following vulnerability message
Abp

https://www.sslshopper.com/article-how-to-disable-ssl-2.0-in-iis-7.html
Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

How to disable SNI on Windows 2012 ADFS server?

Hello,
Could you please let me know how to disable the SNI in Widnows 2012 ADFS Server.
Wanted to configure the NetScalers as both proxy and load balancer for ADFS.
Regards
Jay

https://www.sslshopper.com/article-how-to-disable-ssl-2.0-in-iis-7.html
Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

Disable SSL 2.0 on Windows 2008 R2

Hi.
Can anyone give me a step by step on how to disable SSL 2.0 on IIS 7.5 please? I cannot find an article for it and those refering to IIS 7.0 do not seem to work.
Regards,
Morris
Best Regards, Morris Fury AFRIDATA.net

Morris -
Client-side SSL 2.0 is disabled by default on Windows 7 and Windows Server 2008 R2, which means that, when initiating an SSL connection from either of those two OSes that SSL 2.0 will not be sent as a supported protocol that the server can use. You can see
this in the following registry value:
Key: HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client
Value: DisabledByDefault
Server-side SSL 2.0 is not, however, disabled by default. This means that some other client, when initiating an SSL connection
to Windows Server 2008 R2 can include SSL 2.0 in the list of supported protocols. If SSL 2.0 is the only protocol in common between the client and the server, the server will select it.
Functionally, there is not much difference between setting Enabled to 0 and setting DisabledByDefault to 1.
Hope this helps,
Jonathan Stephens
This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can
be beneficial to other community members reading the thread.

Messenger Express: How do I add the Directory Server to the address book search tool?

In Messenger Express (ME) how do I add the Directory Server (DS) to the address book
search tool?
<P>
Edit the globals.pl file. Look for a line similar to: <BR>
@dirservers = ('MyCompany::phonebook.foo.com::o=FooCorp.,c=US','Four11 Directory::ldap.four11.com::');
<P>
Add an entry to the list. The list is comma delimited and each entry is a
string. The string contains three fields, delimited by a double colon (::). The
first field is the name you want to appear in the User Interface (UI). The second is
the hostname of the DS and the third is the Distinguished Name (DN) to use when searching.
<P>
Please note, Messenger Express is part of the Messaging Server. For more
information on Messenger Express, please see the release notes at
http://home.netscape.com/eng/server/MExpress/relnotes.htm

You can't add a new contact to specific group and there is no app for this. 3rd party apps don't have access to private iPhone APIs with security concerns being a primary reason, which such a function would require.

How to Disable caching of all SSL pages?

May anyone can help me, how to Disable caching of all SSL pages in an web application?
Thanks in advance.
Balamurugan.K

sabre150 wrote:
kajbj wrote:
It doesn't matter that you are using SSL if I understood your question correctly. I'm not certain but I think it does matter. As I understand it, no SSL/HTTPS pages should be cached since this could represent a security weakness. I was a bit vague. I meant that it doesn't matter what he is using under the hood since he isn't doing any "programming" if he's only serving pages. Everything should be related to configuring the server correctly, and/or using the correct header directives (not sure since I'm not a web developer)

How to install a self-signed Digital certificate in messenger express

I have Java Enterprise System 2003 and I can not buy a commercial certificate so I generated a certificate with keygentool from java but I don't know how to install this certificate in the messenger express http server. Could you tell me what config file do I have to change and where to put the certificate?
I can't find documentation about this.

http://docs.sun.com/source/817-6266/security.html#wp13035

How to install Messenger Express Multiplexor (MEM)

I have read through the docs, but am still unclear about how to install the Messenger Express Multiplexor. After installing the Messaging Server bits I ran the "configure" script and selected "Multiplexor". Was this the right choice? After that I used configutils to set the parameters that are specified in the docs. I then ran "start-msg mmp". I assumed there would now be a process listening on the port that I specified. This is not the case.
Does anyone have a "installation" guide for a MEM?
Thanks,
Pete Giesin

try
start-msg http
MMP is the imap/pop multiplexor. The Messaging Server's webmail daemon is what's used for http........
I suspect you may have done the install correctly.

How to disable ssl in messenger express

Similar Messages

Maybe you are looking for