Forwarded to devs Roundcube sieve plugin can´t connect to sieve rules Server

[hansitheking]

TITLE:

Roundcube sieve plugin can´t connect to sieve rules Server​

PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE:

Plesk Onyx for Linux , 17.8.11 MU #1, Ubuntu 16.04.4 LTS, Plesk was updated from 17.5.3 MU #43 to 17.8.11 MU #1 some days ago.​

PROBLEM DESCRIPTION:

If you try to access the sieve rules via roundcube webinterface (roundcube > settings > filters) you will get an error message stating.

Error Message: Sorry no connection to Sieve-Server!​

STEPS TO REPRODUCE:

The value of $config['sieverules_host'] in /usr/share/psa-roundcube/plugins/sieverules/config.inc .php is set to localhost. The sieve plugin is trying to connect via TLS to localhost. The certificate for securing mail is a wildcard cert *.example.de it was set at (Tools & Settings > SSL/TLS Certificates > Certificate for securing mail).
Therefore the connection is refused because of a CN miss match and you will find the following in the roundcube log:

[11-Mar-2018 10:11:54 UTC] PHP Warning:  stream_socket_enable_crypto(): Peer certificate CN=`*.example.de' did not match expected CN=`localhost' in /usr/share/psa-roundcube/vendor/pear/net_sieve/Sieve.php on line 1239
[11-Mar-2018 10:11:54 UTC] ERROR: Failed to establish TLS connection (2)
[11-Mar-2018 10:11:54 UTC] ERROR: Failed to read from socket ()

ACTUAL RESULT:

If you set the value of $config['sieverules_host'] in sieverules/config.inc .php to a value which is fitting the CN name of the certificate the connection will be established without an error.

In this example change localhost to mail.example.de and the connection will be established.​

EXPECTED RESULT:

The value of $config['sieverules_host'] should be set to the CN of the certificate for securing mail. Which is set at:
Tools & Settings > SSL/TLS Certificates > Certificate for securing mail​

ANY ADDITIONAL INFORMATION:

Plesk was updated from 17.5.3 MU #43 to 17.8.11 MU #1 some days ago.​

YOUR EXPECTATIONS FROM PLESK SERVICE TEAM:

Confirm bug​

 

[IgorG]

Thank you for the report. The issue was already fixed and the fix is expected in MU#2.

 

[Sergio Manzi]

... and with 17.8.11#2 the "treatment" must be applied to:

/usr/share/psa-roundcube/plugins/managesieve/config.inc.php