I've updated the email system on the munuserver to a new version. It seems to have worked, with the possible exception of some incorrectly encoded binary attachments (which were probably viruses anyway).
If you use munu for your email and run into any problems, leave a comment here.
Posted by Pixy Misa at October 14, 2005 06:03 AM | TrackBackI am suddenly getting an error message on the PKI certificate for TLS/SSL authentication, saying the cert is expired.
Posted by Eric at October 14, 2005 08:32 PMBlep?
I don't actually have a certficate, which might explain it.
Posted by Pixy Misa at October 15, 2005 01:49 AMThunderbird certainly seems to, very suddenly, think that you do. This started yesterday evening, which would be when you were updating things.
Also, all of a sudden one of my mailman lists is bouncing messages?
Posted by Eric at October 15, 2005 05:48 AMHmm.
I'm going to have to do a bit of testing. Certainly, I never bought a certificate for the server; the POP server might have been set up with a default certificate which you had to accept initially, and I should be able to re-generate that (or something).
As for your mailman list - that's very odd. Could you forward the informative part of a couple of the bounces to me?
There was a potential security hole in the way POP and IMAP were set up by CPanel, hence the conversion, but that should have no effect on Mailman.
Posted by Pixy Misa at October 15, 2005 12:08 PMPixy, the problem is IMAP, not POP. It has what appears to be a self-signed cert.
Posted by Eric at October 15, 2005 03:58 PMRight.
Hmm.
Can you access it if you turn off SSL/TLS?
I'll see if there are any notes about this.
Posted by Pixy Misa at October 15, 2005 04:01 PMGary's getting bounces with the Bestofme mailman list as well.
Posted by Jim at October 15, 2005 05:00 PMHere's the bounce message:
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
Bestofmereminders@snoozebuttondreams.com
local delivery failed
------ This is a copy of the message, including all the headers. ------
Return-path:
Received: from [216.200.145.36] (helo=omta16.mta.everyone.net)
by mew.mu.nu with esmtp (Exim 4.52)
id 1EQnO5-0004Hi-Fp
for Bestofmereminders@snoozebuttondreams.com; Sat, 15 Oct 2005 09:51:53
-0500
Received: from dm16.mta.everyone.net (bigiplb-dsnat [172.16.0.19])
by omta16.mta.everyone.net (Postfix) with ESMTP id 560C54033B
for ; Sat, 15 Oct 2005
07:51:55 -0700 (PDT)
X-Eon-Dm: dm16
Received: from [127.0.0.1] (172.149.247.190 [172.149.247.190])
by dm16.mta.everyone.net (EON-AUTHRELAY2) with ESMTP id
dm16.433b46f8.1f40f0
for ; Sat, 15 Oct 2005
07:51:54 -0700 (PDT)
X-Eon-Sig: AQHaXjtDUReKToPYGwIAAAAB,b1e006ac178d1253c8474f7844b27dc3
Message-ID:
Date: Sat, 15 Oct 2005 10:51:48 -0400
From: Gary Cruse
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5)
Gecko/20041217
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Bestofmereminders List
Subject: BOMS test
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
This is a test of the BOMS reminder service.
Okay, other people have reported the same issue with mailing lists, and apparently there is a fix, which I'm applying now.
Fingers crossed!
Posted by Pixy Misa at October 15, 2005 05:08 PMPixy, I could always access the IMAP server, I just had to accept the expired cert. Naturally, when I turn off TLS/SSL authentication I no longer get the error message about the expired cert.
Posted by Eric at October 15, 2005 05:40 PMOkey dokey, that just means I need to find out why it lost its certificate.
I've applied the patch, so could you see if your mailing list is behaving itself now?
Posted by Pixy Misa at October 15, 2005 05:47 PMyay! All is well with mailman!
I said that wrong on the IMAP server. I never got an expired cert error before. Even when I did start getting the expired cert error, I could always get into IMAP using secure communication. I think you just need to regen the self-signed cert.
Posted by Eric at October 15, 2005 06:08 PMI don't know if this has got anything to do with it, but I just got back from holidays (great, thanks for asking) and found Neomail had disappeared. Is this a permanent state of affairs?
Posted by Simon at October 16, 2005 09:52 AMErm. I don't think it's related. It was probably an automatic update of CPanel that did that without notifying me.
I'll look into it.
Posted by Pixy Misa at October 16, 2005 01:27 PMEven stranger now - I used Horde instead today but now I can't get into that, either.
BTW, if Neomail's gone, have I lost my address book as well?
Posted by Simon at October 16, 2005 03:11 PMOkay, Neomail is still supposed to be intalled and active, but isn't working. I need to investigate some more.
What happens when you try to get into Horde?
Posted by Pixy Misa at October 16, 2005 03:22 PMUgh.
I've confirmed that the upgrade disables Neomail. Of course, they don't mention that fact beforehand.
Looking for a solution now.
Posted by Pixy Misa at October 16, 2005 03:25 PMYour address book should be recoverable in any case. It's disabled the application, but all the data is still there.
Posted by Pixy Misa at October 16, 2005 03:27 PMDid I mention that it appears, now, that IMAP is no longer supporting TLS/SSL?
Posted by Eric at October 16, 2005 09:29 PMWell naturally enough Horde is working this morning. I'm happy enough to use Horde but how do I recover my address book?
Posted by Simon at October 17, 2005 02:00 AMI think with the new version I have to configure TLS manually. Which I will do. Very soon.
Posted by Pixy Misa at October 17, 2005 02:28 AM