MDM Plugin and SSL

[tommi]

Hello,

I hope my english is not to bad After day's of struggeling to make mdm plugin work I found the soloution for me.
I gott the error "cant connect to z-push server" the reason was the certificate (letsencrypt).

The first problem is, when connecting over localhost or 127.0.0.1 the certificate is not valid because of the not matching domain name.

After searching the web for hours and hours here the tip for all with the same problem:

Edit /usr/share/kopano-webapp/plugins/mdm/php/class.pluginmdmmodule.php
Search for "return new SoapClient"
and add "'stream_context'=> stream_context_create(array('ssl'=> array('verify_peer'=>false,'verify_peer_name'=>fal se)))"
Now mdm accept every certificate
Maybe a parameter in the config would help e.g. Hope it helps

Thomas

[fbartels]

Why didn't you change PLUGIN_MDM_SERVER to the hostname, that your certificate is created for?

[tommi]

I tried but it doesn't works. I get SSL errors "140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown" only from the Server (localhost).
Maybe an redirection problem.

If using a Self-signed certificate only the "Hack" will work.

Thomas

[fbartels]

Yes, self signed will also be a problem this way, but if your distro trusts the letsencrypt ca then this should work.

For all other cases going to localhost without ssl is in general also no problem.