[SOLVED] Roundcube doesn't appear to work with PHP 5.6

Edit: I got some help from someone on the Roundcube list.  It turns out my problem involved some Roundcube configuration options that don't seem to be documented.  See the last comment in this thread for the solution.  I will update the Roundcube wiki page to prevent others from having to go through this.
My setup is postfix for SMTP and cyrus for IMAP.  The cyrus IMAP server is set up for plain text authentication over STARTTLS (using a self-signed SSL certificate)
I'm pretty sure I've configured Roundcube correctly, however, I can't get it to authenticate.  Looking in the roundcube error log, I see
[31-Jan-2015 10:27:14 America/Chicago] PHP Warning: stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed in /usr/share/webapps/roundcubemail/program/lib/Roundcube/rcube_imap_generic.php on line 915
[31-Jan-2015 10:27:14 -0600]: IMAP Error: Login failed for [email protected] from 67.198.113.124. Unable to negotiate TLS in /usr/share/webapps/roundcubemail/program/lib/Roundcube/rcube_imap.php on line 184 (POST /?_task=login?_task=login&_action=login)
Googling for a solution, I found this stackoverflow thread suggesting that this is a problem with PHP 5.6 not being able to find self-signed SSL certificates:
http://stackoverflow.com/questions/2682 … ify-failed
The roundcube wiki page tells me nothing (in fact, is quite incomplete; I've already made several changes to bring it up to speed a bit).
Is anyone else successfully using Roundcube with PHP 5.6.5 and an IMAP server that only allows STARTTLS connections using a self-signed certificate?
Last edited by pgoetz (2015-02-03 16:30:58)

So, in order to get Roundcube to use TLS authentication with a self-signed certificate, you must configure $config['imap_conn_options'] in /etc/webapps/roundcubemail/config/config.inc.php.  You must also make sure to set $config['default_host'] using a tls:// prefix, as illustrated below.
$config['default_host'] = 'tls://mail.my_domain.org';
$config['imap_conn_options'] = array(
'ssl' => array(
'verify_peer' => true,
'allow_self_signed' => true,
'peer_name' => 'mail.my_domain.org',
'ciphers' => 'TLSv1+HIGH:!aNull:@STRENGTH',
'cafile' => '/etc/ssl/certs/ssl-cert-cyrus.my_domain.org.pem',
I'm not sure that the ciphers entry is necessary (I have the same ciphers set in /etc/cyrus/imapd.conf), but this configuration works and I've already spent too much time fiddling with this configuration.
The complete list of PHP SSL options can be found here: http://php.net/manual/en/context.ssl.php
Last edited by pgoetz (2015-02-03 16:42:02)

Similar Messages

  • The VAT ID we have doesn't appear to work

    Hello,
    I can't enter my VAT number in my Dev Center account.
    I keep getting the message 'The VAT ID we have doesn’t appear to work. To update it, go here. Learn more.'.
    It's also impossible for me to create a new support ticket.
    Dave Claessens

    Hello Dave,
    If you double checked your VAT ID to make sure that it is valid then please contact
    Dev Center Support for assistance with this. 
    -Miles
    Windows and Windows Phone Dev Center Support
    Send us your feedback about the Windows Platform

  • PowerShell script doesn't appear to work as scheduled task in sharepoint 2013

    PowerShell script doesn't appear to work as scheduled task in sharepoint 2013, it works as normal manual execution
    MCTS Sharepoint 2010, MCAD dotnet, MCPDEA, SharePoint Lead

    Hi,
    To run PowerShell Script as scheduled task in SharePoint 2013, you can take the demo below for a try:
    http://blogs.technet.com/b/meamcs/archive/2013/02/23/sharepoint-2013-backup-with-powershell-and-task-scheduler-for-beginners.aspx
    Thanks
    Patrick Liang
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support,
    contact [email protected]
    Patrick Liang
    TechNet Community Support

  • I just upgraded my Internet service to 12 MPS. It doesn't appear to work any faster than the 3MPS I had before. The AT

    I just upgraded my Internet service to 12 MPS. It doesn't appear to work any faster than the 3MPS I had before. The AT&T guy said it may be the computer rather than the connection. I have an iMac intel core 2 duo, running OS 10.5.8. It has 1 GB of memory. I have plenty of memory left. Is there something I can check on the computer to see if it's capable of running faster with this new Internet upgrade?

    You certainly are going to see improvements if you download big files, i.e. Apple updates, or watching trailers also at higher resolution.
    You won't see much difference if you use peer to peer download.

  • Email Security Plug-in - Doesn't seem to work with right click or save and send

    I've searched the knowledge base but have not located the answer yet.
    We have the Encrypt Message plug-in installed to flag the email [SEND SECURE].  This works very well when in Outlook.  It does not seem to work when right clicking a file to send outside of Outlook or performing Save and Send from within Microsoft Office.  The add-in still shows and users are clicking it and the Send button but the emails are not going securely.  We are on Microsoft2010 on mostly XP machines.
    How can I get Encrypt Message to work in all instances?
    Thank you.
    Starla

    Andreas
    I am getting an error.  See below for what I'm choosing and the response.  let me know if I'm supposed to be trying to download from another area.
    Thanks
    Starla
    Email Security Plug-in - Doesn't seem to work with right click or save and send
    Cisco IronPort Email Security Appliance C370
    Release:IPAS
    Filename: CiscoEmailSecurity_7-2-0-039.exe
      Remove
    Details
    Release
    IPAS
    Filename
    CiscoEmailSecurity_7-2-0-039.exe
    Release Date
    25/Oct/2011
    Description
    Cisco IronPort Email Security Plug-in (Outlook)
    Size
    32541.84375 KB (33322848 bytes)
    Router Checksum
    0x553f
    MD5
    f0c864697d9e1a3e8f5297062943ac50
    Email Security Plug-in - Doesn't seem to work with right click or save and send
    Save the device to 'My Added Devices' list
    More Info
    'My Added Devices' list could be found by: 1. Clicking on 'My Cisco' Tab and expanding
        the 'Added Devices' section. 2. Selecting any task specific product
       selector and clicking on 'My Added
        Devices' in left pane.
    Email Security Plug-in - Doesn't seem to work with right click or save and send
    Set Cisco Notification Alert
    More Info
    All 'Cisco Notification Alerts' list could be found
    by: 1. Clicking on 'My Cisco' Tab and expanding
        the 'Support Notifications' section.
    Cisco service contract information indicates you are not authorized to download software for the following product(s):
    Cisco IronPort Email Security Appliance C170
    Cisco IronPort Email Security Appliance C370
    Cisco IronPort Email Security Appliance C650
    To download software for other product(s), remove the software for the product(s) listed above.
    Or, if you feel this message is in error, please:
    1. Email technical support for 24x7 assistance. To expedite your request, please include the following information:
             User ID (Cisco.com ID used to download software)
             Contact Name
             Company Name
             Contract Number
             Product ID
             Desired Software Release or File Name
    2. Contact your Cisco Representative, Partner or Reseller to ensure product(s) listed above are covered on a service contract. The Partner Locator link may assist in locating your nearest partner.
    3. Associate contracts for those products to your Cisco.com profile using the Instructions found in Profile Manager. After you submit your additional contracts, verification and updates may take up to 6 hours to complete.

  • Siri doesn't seem to work with Find My Friends

    Siri doesn't seem to work with Find My Friends completely accurately. If I ask it where once of my friends is, it tells me it doesn't know, but shows that person in the response, twice, with their location. Anyone experiencing this?
    Also - I found a bug. If you dictate a note via Siri it will not sync with iCloud at all. If you manually update the note however after Siri dictates it will. It will also sync if you manually start a note and then use the microphone on the keyboard.

    Actually, I figured it out. For the person in question I had both [email protected] and [email protected] listed in their contact info.  When you look at them in Find My Friends see which one is highlighted and delete the other. Once I did that they only showed up once in Siri.

  • 2013 Workflows created in SharePoint Designer doesn't seems to work with retension policy!

    Hi Guys, 2013 Workflows created in SharePoint Designer doesn't seems to work with retension policy but 2010 workflows work. Any One have any details resaon or workarround?
    Shafqat Balouch MCT, MCSA, MCSE MCITP, MCPD, Microsoft Partner

    Hi  ,
    According to your description, I can reproduce your scenario in my SharePoint 2013.
    For the Retention Policy, it will schedule how content is managed and disposed by specifying a sequence of retention stages. In SharePoint Designer Workflow 2013, we have looping option available. You can
    use loop option and then pause for duration for achieving same function as Retention Policy to start a workflow.
    Reference:
    http://prasadtechtactics.blogspot.com/2012/07/sharepoint-designer-2013-workflows-part_24.html
    Thanks,
    Eric
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support,
    contact [email protected]
    Eric Tao
    TechNet Community Support

  • I would like to cancel my subscription for Adobe ExportPDF Subscription that I have just signed up for as it doesn't seem to work with my system. How do I do this ?many thanks suslucie

    I would like to cancel my subscription for Adobe ExportPDF Subscription that I have just signed up for as it doesn't seem to work with my system. How do I do this ?many thanks suslucie

    Hi Susan,
    I checked using the email you provided, and there's no history of any orders under that email address. (Then, I removed your email address from you post, since this is a public forum and it's best not to broadcast contact information.)
    I'll message you privately, and you can send along your email from Adobe if you'd like.
    Best,
    Sara

  • Is there a way of using IE7 with Mountain Lion? There used to be this facility using Safari "Develop" with Lion, but this doesn't seem to work with ML

    Is there a way of using IE7 with Mountain Lion? There used to be this facility using Safari "Develop" with Lion, but this doesn't seem to work with ML

    Thank you for this, and to Caleb.
    I've tried using Caleb's approach (which is the same as I used with Lion), but the programme doesn't respond now that I have installed Mountain Lion.
    My problem is that I do not want to use IE7 but that a programme I need regular access to will only allow IE7 and I've been told by the developers that it is too expensive to upgrade this programme to allow it to be used by other browsers.
    So, my puzzle remains the same. I could access IE7 and use the programme using Caleb's solution with Lion. I can't do the same with Mountain Lion. I do (I think!) understand your point about the programme requiring IE7 specifically, but if it worked on Lion, why isn't it working on Mountain Lion? Or was I just lucky before?
    I'll try mende1's approach, though I doubt I'm technical enough to virtualise anything!
    Thanks again. Any further thoughts welcome.

  • Can someone tell me why a standard microphone doesn't seem to work with a mac-mini? Is there another kind of microphone I need to use?

    can someone tell me why a standard microphone doesn't seem to work with a mac-mini? Is there another kind of microphone I need to use?

    Most microphone output a low voltage signal that must be put through a preamp.
    The computer needs to have a line voltage signal level instead.
    Allan

  • My New HP P2015d Printer ($400) doesn't seem to work with New Pavilion Slimeline 64 bit PC !

    My New HP P2015d Printer ($400) doesn't seem to work with New Pavilion Slimeline 64 bit PC ! I need some suggestions. Any help would be appreciated.
    The printer worked for a while and then out of the blue stopped working. We have a virus protection system, so I doubt it is a virus issue.
    *** We already tried to download the latest drivers and that doesn't seem to work ***

    Hi
    Are you trying to find your printer's email address? If so, check out details below
    http://h30434.www3.hp.com/t5/ePrint-Print-Apps-Mobile/how-do-I-find-my-printer-s-email-address/td-p/...
    Although I am an HP employee, I am speaking for myself and not for HP.
    Twitter: @Ciara_B_HP

  • How to configure OCI of Oracle9i to work with PHP or ASP on IIS5

    I've been trying to make OCI of Oracle9i to work with PHP for all week. I went thourgh millions of documents and forums. And I still can't make them work. Anyone, please help me.
    I used to have Oracle8i on my machine and it worked fine with both PHP and ASP on IIS5. Then I decided to change to Oracle9i. So I install Oracle9i in seperate home. And they worked fine. But one day I couldn't access some of my websites via "localhost/mywebsite". And I thought there is something wrong with IIS coz I ran very huge queries. So I reinstall IIS5. Then everything crash. PHP and ASP can't work with OCI. So I uninstalled every Oracle component (database and services) and PHP out of my machine. Then I installed Oracle9i database, redownload "php-4.3.1-installer.exe" , and install PHP.
    Since I can't seem to find "php_oci8.dll" in "c:\php\" after I installed, I assume that oracle9i must provide OCI and I found the file "oci.dll" in "c:\OraHome9\Bin" directory. So I changed the extension directory in php.ini to
    extension_dir = "c:\OraHome9\Bin"
    And it still doesn't work. I'm kinna new to ASP so I don't know how to fix this problem.
    Anyone, would you please give me any suggestion how to solve this problem or where to find the solution for this problem? I'd be very appreciated.

    I've been trying to make OCI of Oracle9i to work with PHP for all week. I went thourgh millions of documents and forums. And I still can't make them work. Anyone, please help me.
    I used to have Oracle8i on my machine and it worked fine with both PHP and ASP on IIS5. Then I decided to change to Oracle9i. So I install Oracle9i in seperate home. And they worked fine. But one day I couldn't access some of my websites via "localhost/mywebsite". And I thought there is something wrong with IIS coz I ran very huge queries. So I reinstall IIS5. Then everything crash. PHP and ASP can't work with OCI. So I uninstalled every Oracle component (database and services) and PHP out of my machine. Then I installed Oracle9i database, redownload "php-4.3.1-installer.exe" , and install PHP.
    Since I can't seem to find "php_oci8.dll" in "c:\php\" after I installed, I assume that oracle9i must provide OCI and I found the file "oci.dll" in "c:\OraHome9\Bin" directory. So I changed the extension directory in php.ini to
    extension_dir = "c:\OraHome9\Bin"
    And it still doesn't work. I'm kinna new to ASP so I don't know how to fix this problem.
    Anyone, would you please give me any suggestion how to solve this problem or where to find the solution for this problem? I'd be very appreciated.

  • Is it possible to work with PHP pages in Oracle ERP R12 and how to set up ?

    Hi,
    Is it possible to work with PHP pages in Oracle ERP R12 and how to set up ?
    Regards
    Nandhakumar P

    Hi Nandhakumar,
    To be able to access any Oracle database using PHP you require the following:
    A server with Apache 2+  (Unix, windows etc)
    PHP enabled using OCI8
    tnsnames.ora
    Oracle instant client and associated libraries
    This gives you direct access into oracle database. As for E-Business, you will compromise the security and safty of of R12 by going in through php. Oracle is not likely to support it either.
    I have got a apache/php/Oracle XE working on a test environment and Ithe performance is not a big issue. If you must I would hughly recommend Oracle Linux for quality and security.

  • Working with PHP

    Flash Builder 4.6 Premium comes with Adobe CS6 Master Suite.
    Does this offer any way to work with PHP as well, or is that only if you get Flash Builder 4.6 for PHP?
    If there's no direct link between the Master Suite version of Flash Builder and Zend Studio, can this be integrated with the free Eclipse Studio which has a PHP version?
    Any info (or links) on how to set this up or other suggestions would be appreciated.
    I'm working on both Flash / Gaia sites and on Drupal 7 sites (which are PHP based)
    Thanks

    http://www.kirupa.com/developer/flash/index.htm#Server_Side_&_Flash

  • Problem when displaying images when working  with PHP, mysql and dreamweaver in a brower

    Hey Guys
    I am new to dynamic development but I already did some
    research and tutorials about how to get a dynamic web site working
    with PHP and Mysql in Dreamweaver. I set up a test page to view
    some content on it directly from the mysql database and it worked
    just fine in dreamweaver only when I pressed the
    live data view.
    When I tried to view the same page using the browser preview
    with firefox and internet explorer, plain text from the database
    was correctly displayed on the brower but the images were absent.
    In the mysql database I used the varchar as my picture data
    type field so that I will refer in dreamweaver in the data binding
    panel in the img.src to the picture column of my database.
    I anyone can tell me what am I doing wrong so that my
    pictures are not displayed in the browser when i click the browser
    preview facility in dreamweaver I would be very very and very
    pleased ! :)

    The odds are that it is the way that you have referenced the
    images rather
    than an issue with the database. If you have the images root
    relative like
    this "/images" then they will work in preview, and on the
    webserver, but
    will not view when looking at the file via localhost.
    If possible make the links page relative and then they should
    work fine.
    Paul Whitham
    Certified Dreamweaver MX2004 Professional
    Adobe Community Expert - Dreamweaver
    Valleybiz Internet Design
    www.valleybiz.net
    "mariosal026" <[email protected]> wrote in
    message
    news:ea3nq2$9ol$[email protected]..
    > Hey Guys
    >
    > I am new to dynamic development but I already did some
    research and
    > tutorials
    > about how to get a dynamic web site working with PHP and
    Mysql in
    > Dreamweaver.
    > I set up a test page to view some content on it directly
    from the mysql
    > database and it worked just fine in dreamweaver only
    when I pressed the
    >
    live
    > data view.
    >
    > When I tried to view the same page using the browser
    preview with firefox
    > and
    > internet explorer, plain text from the database was
    correctly displayed on
    > the
    > brower but the images were absent.
    >
    > In the mysql database I used the varchar as my picture
    data type field so
    > that
    > I will refer in dreamweaver in the data binding panel in
    the img.src to
    > the
    > picture column of my database.
    >
    > I anyone can tell me what am I doing wrong so that my
    pictures are not
    > displayed in the browser when i click the browser
    preview facility in
    > dreamweaver I would be very very and very pleased ! :)
    >

Maybe you are looking for

  • What would it mean to you and your team if you won a Markie in 2015?

    I wanted to thank all of you who emailed a question, sent a tweet and or submitted a nomination for the 2015 Markie Awards! We are tallying the results and will begin judging to select 4 finalists for each category. I spoke with one of the customers

  • KEPM business area not derivate

    Dear All, I have a planning layout with Cost Center + Cost Element. We have maintained derivation in KEDR based on Cost Center to derivate other Characteristic. When we do planning and check the figure in KE25, other characterisitc derviate from Cost

  • Staffing status within organisational structure - adding options (fields)

    Hello within the organisational structure (PPOME) on a position, on the basic data tab there is a drop down table marked STAFFING STATUS.  Could you please tell me if there is a way to add to this list to seperate the position into various assignment

  • Web Agent's "not enforce url" -- not working

    Hi all. I have the following setup. webpolicy Agent 2.1 protected webserver : S1WS 6.o Indentity Server 6.1 I want to protect a web resource at [email protected] and my Identity Server is in [email protected] I donot want to protect or say, see the I

  • Gmail only works in WiFi... not 3G

    phone receives email (through gmail) when attached to a wifi without any issues... when in 3G mode it errors (The user name or password for ACCOUNT NAME is incorrect)... any thoughts?