Re: Squirrelmail and SSL

On Dec 16, 2003, at 07:57 AM, Erich Parzefall wrote:

Am 16.12.2003 um 15:51 schrieb Mike Schienle:

Hi all -

I added SquirrelMail last night to my iTools 7.2 with the latest Tenon updates on MacOS X 10.2.8 so I could provide webmail access for a couple users that needed it. According to an error I was seeing and a post on the SquirrelMail mailing list I needed to add SSL support to my server. I have a single IP address and about a dozen domains on it. I added SSL per the iTools User's Guide for a virtual host with both secure and insecure service. That seems to be working OK, but I'm not sure how to verify it.

The problem I'm still seeing is that SquirrelMail sends the message OK, but gives no indication that it did so. The compose window stays open, but the email arrives at its destination. In the access_log file I see the following entry (last line):

204.32.195.61 - - [16/Dec/2003:07:59:23 -0600] "GET /squirrelmail/src/compose.ph p?mailbox=INBOX HTTP/1.1" 200 7013 "http://www.enviexperts.com/squirrelmail/src/ read_body.php?mailbox=INBOX&passed_id=1&startMessage=1" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/103u (KHTML, like Gecko) Safari/100.1" 204.32.195.61 - - [16/Dec/2003:07:59:45 -0600] "POST /squirrelmail/src/compose.p hp HTTP/1.1" 302 5 "http://www.enviexperts.com/squirrelmail/src/compose.php?mail box=INBOX" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/103u (KHTML , like Gecko) Safari/100.1"

Does anyone have any idea what the problem is and/or how to correct it?
I'm actually working on it... my setting: iTools 7.2 / eshox 3.6 / PostOffice 3.5.3 / SquirrelMail 1.4/ same error, but do you have the same last line as I? The SquirrelMail wants to redirect to this URL-String...

213.166.224.15 - - [16/Dec/2003:11:12:45 +0100] "POST /webmail/src/compose.php HTTP/1.1" 302 0 "http://fmp.netzblick.de/webmail/src/compose.php?mailbox=INBOX"; "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; de-de) AppleWebKit/103u (KHTML, like Gecko) Safari/100" 213.166.224.15 - - [16/Dec/2003:11:12:50 +0100] "\x80m\x01\x03\x01" 501 358 "-" "-"

Must be an error with the config... I tell you when I have a solution...

Hi Erich -

I don't see that line in my logs with SquirrelMail (similar line in a different domain's logs, though), but the person that sent the message to the SquirrelMail list has the same line. Here's his initial comments and the response about enabling SSL. It looks like they were both using MacOS X 10.3 Server, which uses SquirrelMail as its webmail.

From: Cory Loken <cory@xxxxxxx>

After a few days of frustration I finally figured out the issue. You have to have SSL turned. To create a certificate to test with you can follow the instructions at:

http://developer.apple.com/internet/macosx/modssl.html

Since you are using 10.3 Server ignore all the Apache stuff at the bottom. That is all activated by just turning on SSL from the Server Settings app. BAsically once you get to the lines below, follow these commands and then go no further in the instructions:
sudo cp server.key server.key.original
sudo openssl rsa -in server.key.original -out server.key
Let me know if you have any other questions so you don't have to go through the hours of frustration I did.

On a side note, does anybody know how to get SM to work without turning on SSL? It seems to only be required during the sending process. This is only going to be used on our internal LAN so it is something I would rather not even deal with.

Cory

On Dec 6, 2003, at 4:26 PM, Ed Marod wrote:
I am experiencing a same problem with Squirrel Mail in OS X. I have Panther Server running and recently activated WebMail on the URL referred to above. I have only one mail server - the server on this particular machine - and it is properly configured to send mail via SMTP and receive via both POP and IMAP. The WebMail seems to work just fine (I can log in via multiple browsers from multiple locations outside my LAN, my list of IMAP mail appears and I can read it). There is one exception. When I compose a message and send it, the message sends BUT THE SCREEN DOES NOT REFRESH WITH A PAGE SHOWING THAT IT SENT or with the inbox listing or whatever is supposed to show up after SENDING a message using the WebMail (which I understand is a SquirrelMail implementation). I am relatively certain that all e-mail is sent via postfix in Panther Server. However, that is not the problem. Postfix seems to send the message that I compose just fine (I have sent test messages to several addresses inside and outside my network successfuylly). The ONLY problem seems to be that the "compose" page gives no indication that it has successfully sent the message.

When I check the logs for the Mac OS X web service, I see the following messages:

In the Access log:
"POST /webmail/src/compose.php HTTP/1.1" 302 5
"\x80m\x01\x03\x01" 501 -
And in the Error log:

Invalid method in request \x80m\x01\x03\x01

This latter message has appeared 9 of the last ten times I tried, but I have also gotten the messages:
 Invalid method in request \x804\x01\x03
 Invalid method in request \x16\x03
 Invalid method in request \x80g\x01\x03
It is my understanding that the 501 error message is a "not authorized" error. Not sure what 302 is. Is this a permissions problem somewhere? If so, WHERE is the permissions problem? Most important, how do I fix whatever it is?

Ed Marod

Mike Schienle

---------
Tenon Intersystems' iTools Mailing List
To unsubscribe: send mail to itools-request@xxxxxxxxxxxxxxx
with the body only containing: unsubscribe
Find the searchable mailing list archives at:
http://itools.blackpepper.co.nz/