[Tickets #14206] Re: TLS no longer works with self-signed certificates

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://bugs.horde.org/ticket/14206
------------------------------------------------------------------------------
  Ticket             | 14206
  Updated By         | aaronp at critd.com
  Summary            | TLS no longer works with self-signed certificates
  Queue              | Ingo
  Version            | Git master
  Type               | Enhancement
  State              | Feedback
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


aaronp at critd.com (2015-12-29 16:23) wrote:

Interesting. I see that verification is indeed being turned off in my  
Socket/Client.php. Regardless, my Ingo/Sieve works with 'usetls' =>  
false, but not with either 'usetls' => 'tls', or  'usetls' => true.  
Here's what I get in the horde.log file:

Dec 29 10:14:55 hostname HORDE: [ingo] PHP ERROR:  
stream_socket_enable_crypto(): SSL operation failed with code 1.  
OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate  
verify failed [pid 11811 on line 1215 of  
"/usr/local/lib/php/Net/Sieve.php"]


Is it trying to use SSL3? I do not support SSL3 on my Cyrus server. Only TLS.