- Users - Roundcube mailing lists

failed to connect socket
by Roundcube 23 Feb '18

23 Feb '18

When trying to send an email from Roundcube I get: Connection failed: Failed to connect socket: fsockopen(): unable to connect to ssl://mail.covisp.net:587 Sending from any other mail client works on the submission port, so it is not a mail server configuration issue. If I change it to tls://mail.covisp.net I get: SMTP Error in /usr/local/www/roundcube/program/lib/Roundcube/rcube.php (1675): Authentication failure: STARTTLS failed (Code: ) $ openssl s_client -connect mail.covisp.net:587 -starttls smtp CONNECTED(00000003) depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 verify error:num=2:unable to get issuer certificate issuer= O = Digital Signature Trust Co., CN = DST Root CA X3 --- Certificate chain 0 s:/CN=covisp.net i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 i:/O=Digital Signature Trust Co./CN=DST Root CA X3 --- Server certificate -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgISA8l2HqqZkKGc4w829muF4nnZMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAyMTMyMDIxMjZaFw0x ODA1MTQyMDIxMjZaMBUxEzARBgNVBAMTCmNvdmlzcC5uZXQwggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQCjK35UbUb6YSMSzto4KgLPGv/h8jvkRMYuV3al iV28dXMEPUJ8vhGsLbXaMVKouZnrWMgJ7ws6TlzXNPuMnXuoplvhLMtXNKyAtyaI X0Hhhsb3yAfj2WI7FN15kedKnGFzNPDBuo8+g6q0yRgyj1erNj/K8xWwokpcpVrU Q5zsKnyqU9MHmmcyNFNFyCQ+quCfCLcK4T1klrQGKG564HQcj0hEXFZx6txj7irF Zul/0Ju2XdDaaF114+Fq2K/XCuRWfyWAGTSh8z7e/4CU0MDnnqIAVWcWfeeHLjTU 2hRd7TQEH0DWg1C95zHk0yLn2JJ/ffj0q/+RK8G8yjKogv351VNgfjbkoCxnluFS lYx5IPUdRvplEWOEMdtcvLf7J+S+e+Kf3u643SMKwblOboA9yqWyIrp32voxCWoF kVkO84E70U1yCZ4rbVcF9CwEySi/1la7Nm7Bnr24ByJT46TBlAKPEwUaj0VJeHi4 oHxXAZ3IYjdMgbT+DPWiz/jCrdahQrJC++HFaoqLd+dPGlla3Rn/FjigpABqJUJj YNLAXwP2hY2W1bRdJDjBG7978Uy8h2Ec8TTBjOSIHgQOoxFyuPg+kCinELPFxXmI +kxrtwpKelnxHpH5JdFDLIHN80TAqr5v2CnMA+9JSOjX6z6Yvpwom9LWJ9z34vpn X77OjQIDAQABo4ICbzCCAmswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRsPUj9me0H 2wqRgbnPiD2RIYvPUzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMHoGA1UdEQRzMHGCCmNvdmlzcC5uZXSCD21haWwuY292 aXNwLm5ldIIVcGhwbXlhZG1pbi5jb3Zpc3AubmV0ghdwb3N0Zml4YWRtaW4uY292 aXNwLm5ldIISd2VibWFpbC5jb3Zpc3AubmV0gg53d3cuY292aXNwLm5ldDCB/gYD VR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyB m1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVs eWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2Vy dGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3Jn L3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQBONofC5LjFT2KSgkPjvuus shIprx/VYgOpfgFCvAmkQCbpLp8NmS8r4Dg9mMAqh/uhPgRV6BoGiuBR7eJRKH/W /sOY0AtysFxdslWb0hhCjaTXEGNz8c9z53xslNlU1ggp2k71FVzbFfhKnaDbYwem XXyquK2QKg5yPWxGmsfMSyNuP8q/qHCqBRiOWNxozSHw1k0Qr9cod1748hd/+HG4 nGBUiIQUPEJdWm3b+zvlr0PBKaOC4j3LSQpXj4FvHDy19DxxkmVNEE4+px5B0qJ9 WeXyPb2Hop4Ly6o9UKaynICgYEC2CXrRv7GZ/oGesdpF7k9mEA5Tt1nbW+rp+exF -----END CERTIFICATE----- subject=/CN=covisp.net issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 --- No client certificate CA names sent Peer signing digest: SHA512 Server Temp Key: ECDH, P-256, 256 bits --- SSL handshake has read 3783 bytes and written 468 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384 Server public key is 4096 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-GCM-SHA384 Session-ID: 41E4C231E6E193E6DAC1CFBA6C890132BD10B24467F056BEBB68BEE0D5D2E275 Session-ID-ctx: Master-Key: E40F4A64F059BE52089D0F1F5CCF7E0640C870C618FA4FB97337AF1ED43F4F3A325610088EC67BCB2C5113E5E7CC3D9B Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None Start Time: 1519428085 Timeout : 300 (sec) Verify return code: 2 (unable to get issuer certificate) --- 250 DSN -- ɹןʇnqן lbutler(a)covisp.net

1 0

Request security check failed
by Jorge Bastos 23 Feb '18

23 Feb '18

Howdy, I've been seen this info in the logs, and my question is, is this some sort of hack attempt, or should not care about? Jorge, == Feb 22 19:36:52 fastweb roundcube: <h9lj7u9d> PHP Error: Request security check failed (GET /webmail/?_task=logout&_token=4gqJNrvLh3TYhjN4dYxEcV8pba8oT6Q8)

1 1

Export mail folders and messages
by Wendy Quihampton 21 Feb '18

21 Feb '18

Hi Is it possible to export mail folders and messages? Wendy Quihampton Project Manager, Digital Access to Collections E: wendy.quihampton(a)museumsaustralia.org.au M: 0428 587 737 Museums Galleries Australia GLAM Peak www.digitalcollections.org.au

1 0

Example for manage sieve of: /etc/dovecot/sieve/global
by Jorge Bastos 13 Feb '18

13 Feb '18

Howdy, Where could i see an example of whats inside or what would be possible to add there, for the default that comes in manage sieve plugin config.php "/etc/dovecot/sieve/global" Thanks.

1 0

Permissions of enigma/home
by Andreas Meyer 13 Feb '18

13 Feb '18

Hello! What are the right permissions for content of plugins/enigma/home/user(a)domain.org? At the moment it looks like this: drwx------ 2 root root 4096 30. Mai 2016 private-keys-v1.d -rw------- 1 root root 10057 7. Apr 2017 pubring.gpg -rw------- 1 root root 7548 7. Apr 2017 pubring.gpg~ -rw------- 1 root root 600 7. Apr 2017 random_seed -rw------- 1 root root 2685 7. Apr 2017 secring.gpg But that's not right. What's best? Kind regards Andreas -- PGP-Fingerprint: D392 5D21 0299 63D7 5BAE 4562 1E56 B2EA 81A2 59F1

2 1

Re: [RCU] Security issue (possible?) (was: RE: Unknown user in users table, very odd, possible security hole)
by A.L.E.C 11 Feb '18

11 Feb '18

On 02/09/2018 09:28 PM, Jorge Bastos wrote: > Well yes, but now i'm thinking, i have the imap server set to be dynamic > it's filled with: > > mail. + domain.tld > > ok this option in Roundcube is grrreeeaaattt, but I think it makes people > use my server for webmail! Damn! > > How would I tell Roundcube, to connect just to my ip's? > I could do this via iptables but is some shared hosting user wants to > connect to any imap server he would be blocked You have a few options to deal with this default_host username_domain username_domain_forced login_username_filter trusted_host_patterns How to use them will depend on what you want to achieve and your environment. You can always create a plugin that checks the host before connecting to it. -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] ---------------------------------------------------- PGP: 19359DC1 # Blog: https://kolabian.wordpress.com

2 1

LDAP address book - problem with groups
by Franta Hanzlík 11 Feb '18

11 Feb '18

Hi, new to Roundcube, I have still some confusion about configuring the LDAP address book. Please, is somewhere a little detailed description of the configuration scenarios and individual options? Now I have something as this (found somewhere on the net): $config['ldap_public']['public'] = array( 'name' => 'Public LDAP Addressbook', 'hosts' => array('ldap.mydomain'), 'base_dn' => 'o=spse', 'bind_dn' => 'cn=binduser,o=myorg', 'bind_pass' => 'binduseracces', 'filter' => '(&(objectClass=inetOrgPerson)(cn=z*))', 'sort' => 'sn', 'global_search' => true, 'fuzzy_search' => true, 'groups' => array( 'base_dn' => '', 'mail' => '{Mail-Address}(a)mydomain.com', 'filter' => '(&(objectClass=groupOfNames)(Mail-Address=*))', 'object_classes' => array("top", "groupOfNames"), 'class_member_attr' => array( 'groupofnames' => 'member', 'groupofuniquenames' => 'uniquemember' ), ), 'name_field' => 'uid', 'email_field' => 'mail', 'surname_field' => 'sn', 'firstname_field' => 'givenName', 'scope' => 'sub' ); and although as I understand the description for individual people, I do not even understand the description of groups - whole this block: 'groups' => array( 'base_dn' => '', 'mail' => '{Mail-Address}(a)mydomain.com', 'filter' => '(&(objectClass=groupOfNames)(Mail-Address=*))', 'object_classes' => array("top", "groupOfNames"), 'class_member_attr' => array( 'groupofnames' => 'member', 'groupofuniquenames' => 'uniquemember' ), ), - why it is included just where it is? - what is meant by: 'object_classes' => array("top", "groupOfNames"), ? what is block: 'class_member_attr' => array( 'groupofnames' => 'member', 'groupofuniquenames' => 'uniquemember' ), In spite of all the confusion, RC puts something out. But what bothers me and I need to have it differently: - when in new mail I write recipient address, autocompletion offers me the required group. But when I click on it, in the address bar appears no single address (groupname@mydomain), but mail addresses of all group members! What with this? - in address book menu, I want to display group names (as is now), but not their members (or at least not to all RC users). Is this possible somehow? I'm trying Roundcube version 1.3.4, LDAP DB is some commercial one with schema roughly corresponding with Openldap core, and groups are defined as: dn: cn=_groupName_,ou=Groups,o=myorg Mail-Address: _groupName_ objectClass: groupOfNames objectClass: Top objectClass: Mail-Group member: cn=_user1_,ou=XX,o=myorg member: cn=_user2_,ou=YY,o=myorg ... cn: _groupName_ (there isn't complete mail address - only part before '@'. All groups in addressbook are in one domain) Thanks in advance for your help! Franta Hanzlik

2 2

Security issue (possible?) (was: RE: Unknown user in users table, very odd, possible security hole)
by Jorge Bastos 09 Feb '18

09 Feb '18

ALEC!!!!!!! There's some security problem in RC I believe! Check this: Feb 9 01:46:44 fastweb roundcube: <ibj96bvb> Successful login for donny(a)adhigunaputera.com (ID: 100412) from 110.136.11.0 in session ibj96bvbj5akqlt5slpc47ikfb This user doesn't belong to any of the IMAP accounts, how was he able to login? After the login, there's some login failed lines: Feb 9 02:47:27 fastweb roundcube: <ibj96bvb> IMAP Error: Login failed for donny(a)adhigunaputera.com from 110.136.11.0. Empty startup greeting (mail.adhigunaputera.com:143) in /home/hosting/dhosting.pt/webmail/program/lib/Roundcube/rcube_imap.php on line 196 (POST /webmail/?_task=mail&_action=refresh) Feb 9 02:48:37 fastweb roundcube: <ibj96bvb> IMAP Error: Login failed for donny(a)adhigunaputera.com from 110.136.11.0. Empty startup greeting (mail.adhigunaputera.com:143) in /home/hosting/dhosting.pt/webmail/program/lib/Roundcube/rcube_imap.php on line 196 (POST /webmail/?_task=mail&_action=refresh) Feb 9 02:49:47 fastweb roundcube: <ibj96bvb> IMAP Error: Login failed for donny(a)adhigunaputera.com from 110.136.11.0. Empty startup greeting (mail.adhigunaputera.com:143) in /home/hosting/dhosting.pt/webmail/program/lib/Roundcube/rcube_imap.php on line 196 (POST /webmail/?_task=mail&_action=refresh (funny the IP is the network IP) What's the best place to move forward with investigation with this issue, here or dev list? Could you assist me on this? Thank you in advanced, From: users-bounces(a)lists.roundcube.net [mailto:users-bounces@lists.roundcube.net] On Behalf Of Hannu Hirvonen Sent: 8 de fevereiro de 2018 20:43 To: users(a)lists.roundcube.net Subject: Re: [RCU] Unknown user in users table, very odd, possible security hole On 08.02.2018 22:34, Jorge Bastos wrote: Not in there but you made me remind about: // Log successful/failed logins to <log_dir>/userlogins or to syslog That's why I said "something like ...", might have been a bit clearer, of course :-) -- Hannu Hirvonen (hh(a)uwasa.fi <mailto:hh@uwasa.fi> , http://www.uwasa.fi/~hh/) Computer Centre, University of Vaasa, BOX 700, FI-65101 VAASA, Finland

2 3

Re: [RCU] Unknown user in users table, very odd, possible security hole
by Hannu Hirvonen 08 Feb '18

08 Feb '18

On 08.02.2018 22:34, Jorge Bastos wrote: > > Not in there but you made me remind about: > > // Log successful/failed logins to <log_dir>/userlogins or to syslog > That's why I said "something like ...", might have been a bit clearer, of course :-) -- Hannu Hirvonen (hh(a)uwasa.fi, http://www.uwasa.fi/~hh/) Computer Centre, University of Vaasa, BOX 700, FI-65101 VAASA, Finland

1 0

Re: [RCU] Unknown user in users table, very odd, possible security hole
by Hannu Hirvonen 08 Feb '18

08 Feb '18

On 08.02.2018 22:06, Jorge Bastos wrote: > > That’s what i would like to do, but where would i find that information? > > In the users table isn’t there, or I’m not searching in the correct place. > Something like */var/log/roundcubemail/userlogins* perhaps? -- Hannu Hirvonen (hh(a)uwasa.fi, http://www.uwasa.fi/~hh/) Computer Centre, University of Vaasa, BOX 700, FI-65101 VAASA, Finland

2 1

Unknown user in users table, very odd, possible security hole
by Jorge Bastos 08 Feb '18

08 Feb '18

Howdy, I have a verrryyyyy odd thing happening. I have an user, unknown, that is in my users table, for a domain that isn't mine, and never was. This records keep's having last_login fields updated, so someway he's being able to login right? Odd to see that the field after the datetime fields (that is the failed_login_count) is zero, Is there any plugin or so to records the IP from which the logins are made? Where to search for this possible breach? Regards,

2 2

My roundcube email
by Sharon Canovali 07 Feb '18

07 Feb '18

Hi! I'm wondering if anyone can help me get my email straightened out. I've had challenges from the start and greatly fear I've lost business because it's the address on my business cards, but I am unable to receive ANY emails. The account is so clogged emails won't even load. I can't even clean it up, or do anything. 😔 I appreciate any help you can give. Thank you, so much.

4 5

Invalid request! No data was saved. after leaving browser window open
by Karol Augustin 31 Jan '18

31 Jan '18

Hi, I have a problem when user logs out from RC and leaves window open for some time (login screen after logout). When they want to log back they always get "Invalid request! No data was saved." error. I have reproduced it myself and I don't know why it is happening. I have noticed that the same error happens when I remove roundcube_sessid cookie from the browser. This cookie is marked to be deleted when the browser session ends. Is that possible that corresponding session ID is removed from the database when the window is still open and on re-login attempt the still existing cookie causes the error? There is nothing useful in the logs when error happens: Jan 31 09:19:02 mail roundcube: <lm76g1l0> Failed login for karol(a)augustin.pl from xx.xx.xx.xx in session <sessid> (error: 1) The "wrong password" log is the same with "error: 0" at the end. I am using Apache2 with php7.0. Thanks, Karol -- Karol Augustin karol(a)augustin.pl http://karolaugustin.pl/ +353 85 775 5312

1 0

IP in users table
by Jorge Bastos 27 Jan '18

27 Jan '18

Howdy, Is it possible, or is there any known plugin to add the login IP to the users table? Thanks in advanced,

1 0

Records in users table
by Jorge Bastos 27 Jan '18

27 Jan '18

Howdy, I'm curious about something! Is it supposed to have records in the users table, for failed attempts? I have a few record for login's that don't belong to me (they're spam attempts or so, not worried about that. Jorge,

1 0

password
by Kaseem Ismail 25 Jan '18

25 Jan '18

2 1

Roundcube Webmail Update 1.3.4 released
by Thomas Bruederli 14 Jan '18

14 Jan '18

Dear subscribers We proudly announce the next service release to update the stable version 1.3. It contains fixes to several bugs reported by our dear community members and makes Roundcube now fully compatible with PHP 7.2. See the full changelog in the release notes [1] on our Github download page. This release is considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from https://roundcube.net/download. And as usual: please do backup your data before updating! New: starting with version 1.3.3 we also publish Roundcube releases as Docker images. The images are still considered BETA and your feedback with regards to setup, configuration and documentation is much appreciated. Best, Alec & Thomas [1] https://github.com/roundcube/roundcubemail/releases/tag/1.3.4

1 0

DKIM roundcube-1.3.3-1.remi.el6
by Eric Broch 12 Jan '18

12 Jan '18

Hello list, I'm using roundcube-1.3.3-1.remi.el6. I've set up DKIM in my SMTP server. The messages are being signed but are failing DKIM tests when I send in plain text from roundcubemail interface, but when I send the messages in html format from roundcubemail the messages pass DKIM tests. I'm testing by sending to a gmail account and port25.com, by the way. In Thuderbird and Squirrelmail the messages do not fail. If also tested my DKIM with keys with the opendkim package 'opendkim-testkey' and they pass. The the email headers have slight differences between those sent by Squirrelmail/Thunderbird and Roundcube in plain text. Any help would be appreciated in resolving this...maybe a configuration setting? -- Eric Broch White Horse Technical Consulting (WHTC)

1 0

"Must issue a STARTTLS command first"
by Jonathan Nichols 02 Jan '18

02 Jan '18

This might be a really simple issue, but my searches haven’t come up with a solution yet. (only one thread where a guy said he solved it but never elaborated.) Roundcube gives an error of "SMTP Error (250): Authentication failed.” and the log has "Must issue a STARTTLS command first." PHP 5.6.4 Postfix 2.11.3 Roundcube 1.3.3 Things used to work just fine but it’s been a while since I’ve used roundcube to send any emails, so i haven’t noticed until now.. No self-signed certificate. Thunderbird/Apple Mail work ok. config.inc.php has: $config['default_host'] = 'tls://%n’; #I’ve tried ‘tls://pile.pbp.net' as well $config['smtp_port'] = 587; $config['smtp_user'] = '%u'; $config['smtp_pass'] = '%p’; smtp_debug shows: [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 220 pile.pbp.net ESMTP Postfix (Ubuntu) [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Send: EHLO pile.pbp.net [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250-pile.pbp.net [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250-PIPELINING [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250-SIZE 30480000 [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250-ETRN [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250-STARTTLS [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250-ENHANCEDSTATUSCODES [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250-8BITMIME [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 250 DSN [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Send: RSET [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 530 5.7.0 Must issue a STARTTLS command first [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Send: QUIT [31-Dec-2017 14:13:15 -0600]: <jlfk3bmj> Recv: 221 2.0.0 Bye Anything else that I should check? it is a slightly older ubuntu release (15.04) at this point. I’m looking at moving webmail to another machine with a newer install. Thank you! — jonathan

2 2

Timeout on login
by Roundcube 27 Dec '17

27 Dec '17

FreeBSD 11.1, roundcube 1.3.3, php70. When I try to login to any account I get: [27-Dec-2017 06:41:47 -0700]: <c7cd1119> IMAP Error: Login failed for user(a)example.com against mail.covisp.net from xx.xx.xx.xx. Empty startup greeting (mail.covisp.net:993) in) in errors.log I changed $config['default_host'] = 'tls://mail.covisp.net/'; to $config['default_host'] = 'imaps://mail.covisp.net/'; and now get "Could not connect to ssl://mail.covisp.net:993" Do I *have* to use localhost if the mail server is the same machine? I wanted the configuration to be the same across multiple machines, so I was using the FQDN instead.

1 0

Mark messages to be deleted instead of delete them
by Jorge Bastos 26 Dec '17

26 Dec '17

Hi, Is it possible to configure RC to behave like this: * Mark messages to be deleted, but don't move them to trash? Like outlook. Jorge,

2 2

search
by mick crane 25 Dec '17

25 Dec '17

hello. search feature ( 1.3.1 ) searches in the open directory is there somewhere an option to search in the whole INBOX ? Merry Christmas mick crane -- Key ID 4BFEBB31

2 2

Plugin new_user_identity is not filling field in SQL
by Spickiy Nikita 25 Dec '17

25 Dec '17

Hi, i try setting plugin new_user_identity. I adding public address book (ldap), settings for plugin. I analyzed log slapd server and made sure that plugin make request when i login to mail page. But fields in Identiies is empty. I can not understand in what trouble. Please, need help me. Rgds, Nikita Spickiy Skype - n.spickiy(a)outlook.com Asia/Novosibirsk, UTC +7

1 0

Need help with OOO plug-in
by Celso Maiolo 18 Dec '17

18 Dec '17

Hello Roundcube experts- wondering if a kind soul would offer some assistance in setting up a OOO plugin for a functioning Roundcube setup on a MacOS server? The basic setup is working fine. I’ve chosen a specific plugin but it may not be the best one? Also, for some reason when I perform a php -v the mcrypt module complains of a build mismatch? I reinstalled until blue in the face but no joy. Really appreciate and assistance and guidance. Thank you Celso Sent from my iPad

1 0

Roundcube 1.3 and _SERVER['HTTPS']
by Webert de Souza Lima 18 Dec '17

18 Dec '17

Hello everyone, I have recently upgraded Roundcube from release-1.2 to release-1.3. Roundcube is running behind HA-Proxy with SSL-Termination, which means that the traffic is encrypted between the client and haproxy but not between haproxy and roundcube(served by nginx). It seems that after the upgrade, the variable $_SERVER['HTTPS'] is not being set to 'on', and some plugins that use this variable are serving resources over http, which causes the browser to complain about Mixed Content and connection not fully secure. Not all domains are set to redirect to SSL port, so I can't force https, but the ones who use it are set up in nginx like this: server { listen 80; server_name webmail.domain_name; return 301 https://$server_name/; } server { listen 443; root /var/www; index index.php; server_name webmail.domain_name; access_log off; location / { try_files $uri $uri/ =404; } location ~ .php$ { root /var/www; fastcgi_pass php; fastcgi_read_timeout 120; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; } } the port 443 here is just a different port but traffic is not encrypted because the HA-Proxy does the encryption with the client. Any suggestions to fix this? Thanks! Regards, Webert Lima DevOps Engineer at MAV Tecnologia *Belo Horizonte - Brasil* *IRC NICK - WebertRLZ*

2 3

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users