Relationship Graph

Relationship Graph
related to related to child of child of duplicate of duplicate of

View Issue Details

IDProjectCategoryView StatusLast Update
0005071SOGoWeb Mailpublic2020-08-12 10:39
Reporterwar Assigned Tofrancis  
PriorityhighSeverityblockReproducibilityalways
Status closedResolutionwon't fix 
Platform[Server] LinuxOSUbuntuOS Version16.04 LTS
Product Version4.3.2 
Summary0005071: After login, no mailbox visible
Description

After login, the mailbox view is empty (except for "No mailbox selected").

This issue occured right after the update on 6th July 2020 (4.3.2.20200706-1)

Steps To Reproduce

Before upgrade:

1) Login to Sogo (pwd accepted)
2) Mailbox View visible (new mails bold)
3) user = happy

After upgrade:

1) Login to Sogo (pwd accepted)
2) View visible, Mailbox view empty
3) Calendar and address book accessible
4) used = unhappy

Additional Information

apt history.log

Start-Date: 2020-07-06 21:23:22
Commandline: apt upgrade
Requested-By: administrator (1000)
Upgrade: libsope-appserver4.9:amd64 (4.9.r1664.20200703, 4.9.r1664.20200704), libc6-dev:amd64 (2.27-3ubuntu1, 2.27-3ubuntu1.2), sogo:amd64 (4.3.2.20200703-1, 4.3.2.20200706-1), snapd:amd64 (2.42.1+18.04, 2.45.1+18.04), libsope-gdl1-4.9:amd64 (4.9.r1664.20200703, 4.9.r1664.20200704), libc6:amd64 (2.27-3ubuntu1, 2.27-3ubuntu1.2), linux-base:amd64 (4.5ubuntu1.1, 4.5ubuntu1.2), locales:amd64 (2.27-3ubuntu1, 2.27-3ubuntu1.2), libsope-xml4.9:amd64 (4.9.r1664.20200703, 4.9.r1664.20200704), libsbjson2.3:amd64 (4.9.r1664.20200703, 4.9.r1664.20200704), libsope-mime4.9:amd64 (4.9.r1664.20200703, 4.9.r1664.20200704), libc-bin:amd64 (2.27-3ubuntu1, 2.27-3ubuntu1.2), sope4.9-gdl1-postgresql:amd64 (4.9.r1664.20200703, 4.9.r1664.20200704), libsope-ldap4.9:amd64 (4.9.r1664.20200703, 4.9.r1664.20200704), libsope-core4.9:amd64 (4.9.r1664.20200703, 4.9.r1664.20200704), sosreport:amd64 (3.9-1ubuntu0.18.04.3, 3.9.1-1ubuntu0.18.04.1), libc-dev-bin:amd64 (2.27-3ubuntu1, 2.27-3ubuntu1.2), multiarch-support:amd64 (2.27-3ubuntu1, 2.27-3ubuntu1.2), sope4.9-libxmlsaxdriver:amd64 (4.9.r1664.20200703, 4.9.r1664.20200704)
End-Date: 2020-07-06 21:24:42


syslog (during connection attempt)

Jul 7 09:02:28 s4 dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42, session=<5R4Fk9Sp3KR/AAAB>
Jul 7 09:02:28 s4 dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42, session=<qWsFk9Sp3qR/AAAB>
Jul 7 09:02:28 s4 dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42, session=<CW0Ik9Sp4qR/AAAB>
Jul 7 09:02:28 s4 dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42, session=<+OsIk9Sp5KR/AAAB>


sogo.log (during login attempt)

Jul 07 09:14:48 sogod [13393]: SOGoRootPage successful login from '10.1.0.254' for user 'wolf' - expire = -1 grace = -1
Jul 07 09:14:48 sogod [13393]: <0x55ce6a05dd60[SOGoWebAppointmentFolder]:8F3-5DCDB300-1F-4F61CA80> Load web calendar https://base.uni-ak.ac.at/calendar/user/5daf5431fed2e0036ea9bcf0/calendar.ics (200)
Jul 07 09:14:51 sogod [13393]: <0x55ce6a890b20[SOGoWebAppointmentFolder]:526B-5C58AD80-1-4535B800> Load web calendar http://www.rotary.at/admin/component/edit/User_Edit_Calendar_Component/Index/club-calendar?c=92&amp;u=m3030&amp;h=ddea1bb0 (200)
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a4a3390[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to start date for UID 131892
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a4a3390[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to end date for UID 131892
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a3d2990[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to start date for UID 131891
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a3d2990[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to end date for UID 131891
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a523770[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to start date for UID 131890
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a523770[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to end date for UID 131890
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a4f7be0[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to start date for UID 131889
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a4f7be0[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to end date for UID 131889
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a5a9580[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to start date for UID 131888
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a5a9580[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to end date for UID 131888
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a4ee170[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to start date for UID 131887
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a4ee170[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to end date for UID 131887
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a5d7fa0[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to start date for UID 131886
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a5d7fa0[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to end date for UID 131886
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a507200[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to start date for UID 131885
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a507200[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to end date for UID 131885
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a3c5ff0[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to start date for UID 131884
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a3c5ff0[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to end date for UID 131884
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a489460[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to start date for UID 131883
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a489460[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to end date for UID 131883
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a949ad0[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to start date for UID 130325
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a949ad0[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to end date for UID 130325
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a440d70[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to start date for UID 126905
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a440d70[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to end date for UID 126905
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a4c8800[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to start date for UID 127628
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a4c8800[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to end date for UID 127628
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a85c670[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to start date for UID 126904
Jul 07 09:14:51 sogod [13393]: [ERROR] <0x0x55ce6a85c670[iCalEvent]> Event with no timezone; setting timezone Europe/Vienna to end date for UID 126904
Jul 07 09:14:51 sogod [13393]: <0x55ce6a2d5140[SOGoWebAppointmentFolder]:4E73-5C58AC80-7-7AC9B88> Load web calendar https://cis.technikum-wien.at/webdav/google.php?cal=g5MX0qwlJpelKBBQNs_zEh4MZYZInpoDV6WJjIbOmhU&amp;1535368595.0746 (200)
Jul 07 09:14:52 sogod [13393]: 10.1.0.254 "POST /SOGo/connect HTTP/1.1" 200 48/58 4.427 - - 2M - 17
Jul 07 09:14:52 sogod [13393]: |SOGo| terminating app, vMem size limit (384 MB) has been reached (currently 393 MB)
Jul 07 09:14:52 sogod [11542]: <0x0x55ce69e300e0[WOWatchDogChild]> child 13393 exited
Jul 07 09:14:52 sogod [11542]: <0x0x55ce69c31be0[WOWatchDog]> child spawned with pid 16441
Jul 07 09:14:52 sogod [16441]: <0x0x55ce69f359c0[WOHttpAdaptor]> notified the watchdog that we are ready
Jul 07 09:14:53 sogod [16441]: <0x0x55ce69f65650[SOGoCache]> Cache cleanup interval set every 300.000000 seconds
Jul 07 09:14:53 sogod [16441]: <0x0x55ce69f65650[SOGoCache]> Using host(s) 'localhost' as server(s)
Jul 07 09:14:53 sogod [16441]: [ERROR] <0x0x55ce69f95d30[SOGoUserManager]> addressbook source 'directory' has no displayname
Jul 07 09:14:53 sogod [16441]: 10.1.0.254 "GET /SOGo/so/wolf HTTP/1.1" 302 0/0 0.012 - - 628K - 14
Jul 07 09:14:53 sogod [16441]: [WARN] <0x0x7f87c2136f00[WOxElemBuilder]> could not locate builders: WOxExtElemBuilder,WOxExtElemBuilder
Jul 07 09:14:53 sogod [16441]: 10.1.0.254 "GET /SOGo/so/wolf/view HTTP/1.1" 302 0/0 0.050 - - 1M - 14
Jul 07 09:14:53 sogod [16441]: 10.1.0.254 "GET /SOGo/so/wolf/Mail HTTP/1.1" 302 0/0 0.004 - - 0 - 14
Jul 07 09:14:54 sogod [16441]: 10.1.0.254 "GET /SOGo/so/wolf/Mail/view HTTP/1.1" 200 19993/0 0.085 85345 76% 3M - 14
Jul 07 09:14:54 sogod [16441]: [WARN] <0x0x55ce6a0f57e0[SOGoWebDAVAclManager]> entry '{DAV:}write' already exists in DAV permissions table
Jul 07 09:14:54 sogod [16441]: [WARN] <0x0x55ce6a0f57e0[SOGoWebDAVAclManager]> entry '{DAV:}write-properties' already exists in DAV permissions table
Jul 07 09:14:54 sogod [16441]: [WARN] <0x0x55ce6a0f57e0[SOGoWebDAVAclManager]> entry '{DAV:}write-content' already exists in DAV permissions table
Jul 07 09:14:54 sogod [16441]: 10.1.0.254 "GET /SOGo/so/wolf/Calendar/alarmslist?browserTime=1594106094 HTTP/1.1" 200 353/0 0.112 - - 192K - 15
2020-07-07 09:14:54.767 sogod[16441:16441] ERROR(-[NGActiveSSLSocket startTLS]): couldn't setup SSL connection on host 127.0.0.1 (error:00000001:lib(0):func(0):reason(1))...
Jul 07 09:14:54 sogod [16441]: [ERROR] <0x0x55ce6a1c4a80[NGImap4ConnectionManager]> IMAP4 login failed:
host=127.0.0.1, user=wolf, pwd=yes
url=imaps://wolf@127.0.0.1/
base=(null)
base-class=(null))
= <0x0x55ce6a0dfcf0[NGImap4Client]: login=wolf(pwd) address=<0x0x55ce6a179820[NGInternetSocketAddress]: host=127.0.0.1 port=993>>
Jul 07 09:14:54 sogod [16441]: <0x55ce6a250680[SOGoMailAccount]:0> renewing imap4 password
2020-07-07 09:14:54.795 sogod[16441:16441] ERROR(-[NGActiveSSLSocket startTLS]): couldn't setup SSL connection on host 127.0.0.1 (error:00000001:lib(0):func(0):reason(1))...
Jul 07 09:14:54 sogod [16441]: [ERROR] <0x0x55ce6a1c4a80[NGImap4ConnectionManager]> IMAP4 login failed:
host=127.0.0.1, user=wolf, pwd=yes
url=imaps://wolf@127.0.0.1/
base=(null)
base-class=(null))
= <0x0x55ce6a251470[NGImap4Client]: login=wolf(pwd) address=<0x0x55ce69feea70[NGInternetSocketAddress]: host=127.0.0.1 port=993>>
Jul 07 09:14:54 sogod [16441]: [ERROR] <0x55ce6a250680[SOGoMailAccount]:0> Could not connect IMAP4
Jul 07 09:14:54 sogod [16441]: 10.1.0.254 "GET /SOGo/so/wolf/Mail/0/view HTTP/1.1" 200 17/0 0.074 - - 0 - 15
2020-07-07 09:14:54.974 sogod[16441:16441] ERROR(-[NGActiveSSLSocket startTLS]): couldn't setup SSL connection on host 127.0.0.1 (error:00000001:lib(0):func(0):reason(1))...
Jul 07 09:14:54 sogod [16441]: [ERROR] <0x0x55ce6a1c4a80[NGImap4ConnectionManager]> IMAP4 login failed:
host=127.0.0.1, user=wolf, pwd=yes
url=imaps://wolf@127.0.0.1/
base=(null)
base-class=(null))
= <0x0x55ce6a24e6d0[NGImap4Client]: login=wolf(pwd) address=<0x0x55ce6a04ee70[NGInternetSocketAddress]: host=127.0.0.1 port=993>>
Jul 07 09:14:54 sogod [16441]: <0x55ce6a223390[SOGoMailAccount]:0> renewing imap4 password
2020-07-07 09:14:55.004 sogod[16441:16441] ERROR(-[NGActiveSSLSocket startTLS]): couldn't setup SSL connection on host 127.0.0.1 (error:00000001:lib(0):func(0):reason(1))...
Jul 07 09:14:55 sogod [16441]: [ERROR] <0x0x55ce6a1c4a80[NGImap4ConnectionManager]> IMAP4 login failed:
host=127.0.0.1, user=wolf, pwd=yes
url=imaps://wolf@127.0.0.1/
base=(null)
base-class=(null))
= <0x0x55ce6a3178e0[NGImap4Client]: login=wolf(pwd) address=<0x0x55ce6a1dff60[NGInternetSocketAddress]: host=127.0.0.1 port=993>>
Jul 07 09:14:55 sogod [16441]: [ERROR] <0x55ce6a223390[SOGoMailAccount]:0> Could not connect IMAP4
Jul 07 09:14:55 sogod [16441]: 10.1.0.254 "POST /SOGo/so/wolf/Mail/unseenCount HTTP/1.1" 200 21/31 0.091 - - 0 - 15
Jul 07 09:15:03 sogod [16441]: 216.244.66.227 "GET /SOGo/dav/wolf/Contacts/24CA-575C2200-1-5B00BE80/ HTTP/1.1" 401 0/0 0.003 - - 0 - 15


Screenshot attached

TagsNo tags attached.

Relationships

has duplicate 0005076 closedsebastien Webmail : Cannot see mails, inbox, draft after certificat update 
related to 0005079 resolvedfrancis How to disable SSL cert verification for SMTP (auth) connection? 

Activities

war

war

2020-07-07 07:19

reporter  

war

war

2020-07-07 07:21

reporter   ~0014452

Just as to clarify:

No other adjustment were made to the system (e.g. changes of certificates or postfix / dovecot settings)

realizelol

realizelol

2020-07-07 12:36

reporter   ~0014453

Hi war,

i also stated the same problem since sunday (as I do a autoupdate every sunday at 4:00am).

As workaround I hence this method:
/etc/dovecot/conf.d/99-local-imap.conf:
service imap-login {
inet_listener imap {
address = 127.0.0.1
port = 143
}

service_count = 1
process_min_avail = 2
process_limit = 100
}

/var/lib/sogo/GNUstep/Defaults/sogod.plist:
<key>SOGoIMAPServer</key>
<string>imap://127.0.0.1:143</string>

I also tried to reduce the TLS version to 1.0 in dovecot but without any success.

Your Update log:
sogo:amd64 (4.3.2.20200703-1, 4.3.2.20200706-1)
libsope-core4.9:amd64 (4.9.r1664.20200703, 4.9.r1664.20200704)

My Update log:
sogo:amd64 (4.3.2.20200627-1, 4.3.2.20200704-1)
libsope-core4.9:amd64 (4.9.r1664.20200624, 4.9.r1664.20200704)

So it must have something to do with sope 4.9.r1664.20200704 because you had previously 4.9.r1664.20200703 installed and it was working?
Or since sogo 4.3.2.20200704-1 because 4.3.2.20200705-1, 4.3.2.20200706-1, 4.3.2.20200707-1 od not resolve the problem!

On thuesday I am in holiday now I am facing this problem what a nice deal.
Also there's no archive we can deal with. :(

best regards
realizelol

war

war

2020-07-07 12:39

reporter   ~0014454

I can try your workaround.

However, I have not changed anything in dovecot. The issue has to attributed to SOGo and not require me to open other ports.

realizelol

realizelol

2020-07-07 13:17

reporter   ~0014455

Hi war,

don't understand me wrongly. Inverse inc. should solve the problem as soon as possible because I also don't like the transport unencrypted even it's just locally.
But let me tell you that you "only" have to listen on port 143 locally (127.0.0.1) so even if you would open port 143 to the internet it shouldn't give a repsonse if you really disabled imap protocol
as I've done.

What I forget to tell you: You may have the need to reboot the system. Restarting just dovecot & sogo wasn't working for me.

best regards
realizelol

PS: I am running on OS: Ubuntu 20.04 Focal Fossa

lolo750paso

lolo750paso

2020-07-07 15:01

reporter   ~0014456

Hi,
thanks for the workaround, I faced nearly the same problem, logs were a little bit different:

Jul 07 16:19:00 sogod [5212]: [ERROR] <0x0F2B2970[SOGoMailAccount]:0> Could not connect IMAP4
Jul 07 16:19:00 sogod [5212]: [ERROR] <0x0x55f50e974620[WOHttpAdaptor]> http server caught: <NSException: 0x55f50f118870> NAME:NSInvalidArgumentException REASON:-[_NSConcreteProcessInfo fileDescriptorCount]: unrecognized selector sent to instance 0x55f50e9d6c90 INFO:(null)
Jul 07 16:19:00 sogod [5212]: [ERROR] <0x0x55f50f03da50[NGImap4ConnectionManager]> IMAP4 login failed:
host=193.50.5.57, user=user, pwd=yes
url=imaps://user@xxx.xx.x.xx/
base=(null)
base-class=(null))
= <0x0x55f50f2fc7e0[NGImap4Client]: login=user(pwd) address=<0x0x55f50f308b80[NGInternetSocketAddress]: host=xxx.xx.x.xx not-filled>>

modifying sogo.conf was sufficient as imap was allowed on my mail server.

Best regards,

Laurent

war

war

2020-07-07 15:52

reporter   ~0014457

Thanks for your support and hints.

One can easily change the connection in sogo.conf
from
SOGoIMAPServer = imaps://127.0.0.1:993;
to
SOGoIMAPServer = imap://127.0.0.1:143;

and restart with
sudo systemctl restart sogo.service && sudo systemctl restart apache2.service

(mind the protocol: imaps -> 993, imap -> 143)

I would not recommend changing files in /var/lib/SOGo... as these are overwritten by updates.

lolo750paso

lolo750paso

2020-07-07 16:01

reporter   ~0014458

Further investigation, the error is exactly the same on sogo 2 and Sogo 4, the only error I can see now is :

Jul 07 17:24:29 sogod [5808]: [ERROR] <0x0x558ec23b58d0[WOHttpAdaptor]> http server caught: <NSException: 0x558ec39a5370> NAME:NSInvalidArgumentException REASON:-[_NSConcreteProcessInfo fileDescriptorCount]: unrecognized selector sent to instance 0x558ec2417c90 INFO:(null)

Best regards

Laurent

ludovic

ludovic

2020-07-07 17:18

administrator   ~0014459

Upgrade SOPE.

realizelol

realizelol

2020-07-07 17:55

reporter   ~0014460

SOPE is already the newest version available in nightly repo "4.9.r1664.20200704". Or should this mean you're actually updating SOPE?

As I can see there was a big update to openssl/gnutls and hostname detection in github commit 9138e79:
https://github.com/inverse-inc/sope/commit/9138e796f091756b13a4836610c05ccd8d4ca50f

maybe a hint?:
I don't really know much about CPP but maybe this has to be #include ?:
https://github.com/inverse-inc/sope/commit/9138e796f091756b13a4836610c05ccd8d4ca50f#diff-92d6f641cf1b1cafceece900cd04f3e7R26
as of https://docs.microsoft.com/de-de/cpp/preprocessor/hash-import-directive-cpp?view=vs-2019 it has to: #import "filename" [attributes] or #import <filename> [attributes]
or otherwise there is a attribute missing?

best regards
realizelol

ludovic

ludovic

2020-07-07 20:14

administrator   ~0014461

4.9.r1664.20200704 is NOT the latest version - 4.9.r1664.20200707 is.

Maybe you're using Xenial, builds have been broken for a few days on that distro - the others are OK.

realizelol

realizelol

2020-07-07 20:54

reporter   ~0014462

Last edited: 2020-07-09 13:56

Hi ludovic,

on my server:

apt update && apt-cache policy sope4.9*
Hit:1 http://mirror.hetzner.de/ubuntu/packages focal InRelease
Hit:2 http://mirror.hetzner.de/ubuntu/packages focal-updates InRelease                                                                                                                                                                                             
Hit:3 http://mirror.hetzner.de/ubuntu/packages focal-backports InRelease                                                                                                                                                                                           
Hit:4 http://mirror.hetzner.de/ubuntu/packages focal-security InRelease                                                                                                                                                                                            
Hit:5 http://ppa.launchpad.net/ondrej/php/ubuntu focal InRelease                                                                                                                                                                                                   
Hit:6 https://rspamd.com/apt-stable bionic InRelease                                                                                                                                                      
Hit:7 http://archive.ubuntu.com/ubuntu focal InRelease                                                                                                           
Hit:8 http://security.ubuntu.com/ubuntu focal-security InRelease                                                                           
Hit:9 http://archive.ubuntu.com/ubuntu focal-updates InRelease                                                                             
Hit:10 http://nginx.org/packages/ubuntu focal InRelease                                                              
Hit:11 http://archive.ubuntu.com/ubuntu focal-backports InRelease                                 
Hit:12 http://nginx.org/packages/mainline/ubuntu focal InRelease                                  
Hit:13 http://packages.inverse.ca/SOGo/nightly/4/ubuntu focal InRelease     
Reading package lists... Done                         
Building dependency tree       
Reading state information... Done
All packages are up to date.
sope4.9-stxsaxdriver:
  Installed: (none)
  Candidate: 4.9.r1664.20200704
  Version table:
     4.9.r1664.20200704 500
        500 http://packages.inverse.ca/SOGo/nightly/4/ubuntu focal/focal amd64 Packages
sope4.9-dbg:
  Installed: (none)
  Candidate: 4.9.r1664.20200704
  Version table:
     4.9.r1664.20200704 500
        500 http://packages.inverse.ca/SOGo/nightly/4/ubuntu focal/focal amd64 Packages
sope4.9-appserver:
  Installed: (none)
  Candidate: 4.9.r1664.20200704
  Version table:
     4.9.r1664.20200704 500
        500 http://packages.inverse.ca/SOGo/nightly/4/ubuntu focal/focal amd64 Packages
sope4.9-gdl1-postgresql:
  Installed: (none)
  Candidate: 4.9.r1664.20200704
  Version table:
     4.9.r1664.20200704 500
        500 http://packages.inverse.ca/SOGo/nightly/4/ubuntu focal/focal amd64 Packages
sope4.9-gdl1-mysql:
  Installed: 4.9.r1664.20200704
  Candidate: 4.9.r1664.20200704
  Version table:
 *** 4.9.r1664.20200704 500
        500 http://packages.inverse.ca/SOGo/nightly/4/ubuntu focal/focal amd64 Packages
        100 /var/lib/dpkg/status
sope4.9-db-connector:
  Installed: (none)
  Candidate: (none)
  Version table:
sope4.9-libxmlsaxdriver:
  Installed: 4.9.r1664.20200704
  Candidate: 4.9.r1664.20200704
  Version table:
 *** 4.9.r1664.20200704 500
        500 http://packages.inverse.ca/SOGo/nightly/4/ubuntu focal/focal amd64 Packages
        100 /var/lib/dpkg/status

and also on https://packages.inverse.ca/SOGo/nightly/4/ubuntu/pool/focal/s/sope/
or even on https://packages.inverse.ca/SOGo/nightly/4/debian/pool/buster/s/sope/
or https://packages.inverse.ca/SOGo/nightly/4/rhel/8/x86_64/RPMS/ there's no 4.9.r1664.20200707.

Isn't it published yet?

best regards
realizelol

michael100

michael100

2020-07-08 12:10

reporter   ~0014463

Long time listener, first time caller.

I auto-update at 5am on Sundays, have had issues since. All the errors listed above i've seen. Difference - our IMAP never had TLS enabled. imap is on the same server, and per their comment "// Local connection is considered as secure by Dovecot, so 'imap://' is fine." i've left it alone.

I changed these last night:

SOGoMaximumPingInterval = 3540;
SOGoMaximumSyncInterval = 3540;
SOGoInternalSyncInterval = 60;
WOWatchDogRequestTimeout = 15;

from the defaults, and it started running smoother. Most of the complaints i've had are from users with boxes >=3 gb.

I think I'm going to change the update from Sunday's to Wednesday's or Thursday's. I think this is the 3rd time this year we've had issues post update. (been running since 3/2017)

the_nic

the_nic

2020-07-09 16:48

reporter   ~0014486

From the logs it seems your configuration/certificate is invalid. If you are using tls you have to specify the fqdn, not 127.0.0.1, otherwise the certificate validation will of course fail. If you localhost is fine for you, disable tls. Otherwise use imaps://mail.example.org (adjusted accordingly).
Certificates failing validation will not accepted anymore!

war

war

2020-07-09 19:20

reporter   ~0014493

@the_nic: I presume that your message addressed my post.

If the certificate is the problem, how could SOGo work ever since 4.0 was launched? The certificate is valid and was not changed on 6th of July.

ludovic

ludovic

2020-07-09 19:21

administrator   ~0014494

@war Because you're using a nightly build and that code was merged a few days ago.

war

war

2020-07-09 19:23

reporter   ~0014495

@the_nic: Just reread your post.

Did you mean that the code was modified in such a way that TLS issues that previously were resolved quietly are now turned down and the software stops working?

If so, it would be nice to give users notice in the post upgrade script (which notifies me about how to upgrade databases - totally useless in most cases).

Could have helped.

alexvitanyi

alexvitanyi

2020-07-09 20:55

reporter   ~0014501

I can confirm that this was the issue.
After I changed to the FQDN defined in the certificate it works perfectly.
I would also like that such changes should be more visible...

ludovic

ludovic

2020-07-09 20:57

administrator   ~0014502

Remember that you are running a nightly build - don't expect us to do fancy announcements every time we make a commit. Those are reserved for a release.

alexvitanyi

alexvitanyi

2020-07-09 21:03

reporter   ~0014503

I fully agree, but in such cases it would really save us and you a lot of time ;-)
Cheers
Alex

ludovic

ludovic

2020-07-09 21:09

administrator   ~0014504

You can already read the commit messages before upgrading if you want to save time.

the_nic

the_nic

2020-07-10 08:09

reporter   ~0014508

@war yes, that is correct. Before the merge, any certificate was accepted by sogo when using tls. This was actually a severe security issue and undermined the purpose of tls and the certificate chain.

That is why now misconfigured installations will fail to work. Allowing admins to disable peer validation could be an option, but that could take a bit of time, and is of course discouraged; fixing your setup/config is the better option as you will immediately notice any failures.

war

war

2020-07-10 11:35

reporter   ~0014510

@the_nic: After understanding the purpose and intention behind the change, I fully agree with you and support this move.

Please bear in mind that nightly users contribute to the stability of your commercial package. Totally ignoring their needs (for stability) might reduce acceptance and positive feedback. So I think that a brief mention in the post-installation notice would have been benefitial. If I ignore those, it's completely my fault (as happened to me after upgrading from 2 to 3).

btw: I replaced IP to fqdn and it worked well. - Thanks for the hint

war

war

2020-07-10 11:38

reporter   ~0014511

As for me, this issue can be closed. Please update the online and PDF documentation as there is still the IP address as an option.

D SOGoIMAPServer Parameter used to set the DNS name or IP address of the IMAP server used by SOGo. You can also use SSL or TLS by providing a value using an URL, such as:

  • imaps://127.0.0.1:993
  • imap://127.0.0.1:143/?tls=YES

As I understand, the first line is not possible

francis

francis

2020-07-10 14:24

administrator   ~0014515

There's no point in enabling TLS/SSL if you don't want the certificate to be verified. Read comments in related tickets.

Issue History

Date Modified Username Field Change
2020-07-07 07:19 war New Issue
2020-07-07 07:19 war File Added: Screenshot 2020-07-07 at 09.10.45.png
2020-07-07 07:21 war Note Added: 0014452
2020-07-07 12:36 realizelol Note Added: 0014453
2020-07-07 12:39 war Note Added: 0014454
2020-07-07 13:17 realizelol Note Added: 0014455
2020-07-07 15:01 lolo750paso Note Added: 0014456
2020-07-07 15:52 war Note Added: 0014457
2020-07-07 16:01 lolo750paso Note Added: 0014458
2020-07-07 17:18 ludovic Note Added: 0014459
2020-07-07 17:55 realizelol Note Added: 0014460
2020-07-07 20:14 ludovic Note Added: 0014461
2020-07-07 20:54 realizelol Note Added: 0014462
2020-07-08 12:10 michael100 Note Added: 0014463
2020-07-09 13:56 francis Note Edited: 0014462
2020-07-09 16:48 the_nic Note Added: 0014486
2020-07-09 19:20 war Note Added: 0014493
2020-07-09 19:21 ludovic Note Added: 0014494
2020-07-09 19:23 war Note Added: 0014495
2020-07-09 20:55 alexvitanyi Note Added: 0014501
2020-07-09 20:57 ludovic Note Added: 0014502
2020-07-09 21:03 alexvitanyi Note Added: 0014503
2020-07-09 21:09 ludovic Note Added: 0014504
2020-07-10 08:09 the_nic Note Added: 0014508
2020-07-10 11:35 war Note Added: 0014510
2020-07-10 11:38 war Note Added: 0014511
2020-07-10 14:09 francis Relationship added related to 0005079
2020-07-10 14:24 francis Assigned To => francis
2020-07-10 14:24 francis Status new => closed
2020-07-10 14:24 francis Resolution open => won't fix
2020-07-10 14:24 francis Note Added: 0014515
2020-08-12 10:39 Christian Mack Relationship added has duplicate 0005076