Tickets :: Comment on [#14206] TLS no longer works with self-signed certificates

* Your Email Address
* Spam protection	Enter the letters below: . . ..__ ._. __. \| \| \|[__) \| (__ \|___\|__\|\| \_\|_.__)
Comment	> Sorry, but I need to open this ticket again. I was not testing > correctly, and it turns out the problem was still happening. > > After more research and adding a little debug in > Horde/Socket/Client.php, I discovered that my problem is that > startTls() never gets called when making a sieve connection in Ingo. > I then discovered that, of course, Ingo is actually using Net_Sieve > to connect and not Horde_Socket_Client. I then started passing the > same verify_peer and verify_peer_name TLS options, and now TLS works > with Ingo. Here is a clip from my lib/Transport/Timsieved.php > starting at line 60: > > <SNIP> > protected function _connect() > { > if (!empty($this->_sieve)) { > return; > } > > $options = array( > 'ssl' => array( > 'verify_peer' => false, > 'verify_peer_name' => false > ) > ); > > $auth = empty($this->_params['admin']) > ? $this->_params['username'] > : $this->_params['admin']; > > $this->_sieve = new Net_Sieve( > $auth, > $this->_params['password'], > $this->_params['hostspec'], > $this->_params['port'], > $this->_params['logintype'], > $this->_params['euser'], > $this->_params['debug'], > false, > $this->_params['usetls'], > $options, > array($this, 'debug') > ); > </SNIP> > > This was quick and dirty. Maybe you would prefer to pass this kind of > thing through the constructor? Either way, I think this or something > similar should be added for the next release. Thanks!
Attachment
Watch this ticket

Saved Queries