Roundcube stoped working "Connection to imap server failed"

[Bart_NL]

TITLE:

Roundcube stoped working "Connection to imap server failed"​

PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE:

CentOS Linux 7.4.1708 (Core)‬
Plesk Onyx Version 17.8.5
Roundcube (1.2.5)​

PROBLEM DESCRIPTION:

Hi,

It's not possible to log on to webmail trough the use of Roundcube. Roundcube will give a notification that the "Connection to imap server failed".

I read online somewhere that it might has something to do with php 5.6? but im not sure how to test that. Also Horde works as expected.​

STEPS TO REPRODUCE:

Go to https://webmail.example.com en try to login​

ACTUAL RESULT:

Error with debug set to 4:

Warning: stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed in /usr/share/psa-roundcube/program/lib/Roundcube/rcube_imap_generic.php on line 949

Warning: stream_socket_client(): Failed to enable crypto in /usr/share/psa-roundcube/program/lib/Roundcube/rcube_imap_generic.php on line 949

Warning: stream_socket_client(): unable to connect to ssl://localhost:993 (Unknown error) in /usr/share/psa-roundcube/program/lib/Roundcube/rcube_imap_generic.php on line 949
IMAP Error in /usr/share/psa-roundcube/program/lib/Roundcube/rcube_imap.php (193): Login failed for [email protected] from xx.xx.xx.xx(X-Real-IP: xx.xx.xx.xx). Could not connect to ssl://localhost:993: Unknown reason

EXPECTED RESULT:

Able to login​

ANY ADDITIONAL INFORMATION:

​

YOUR EXPECTATIONS FROM PLESK SERVICE TEAM:

Confirm bug​

 

[UFHH01]

Hi Bart_NL,

pls. include your "config.inc.php" from "/usr/share/psa-roundcube/config" as attachment for further investigations.

 

[Bart_NL]

Hi,

Sure, I removed the username and password of the config.inc.php
And the debug I placed there myself so I would have more information

<?php
// Copyright 1999-2017. Plesk International GmbH. All rights reserved.
$config = array();
$config['db_dsnw'] = 'mysql://user:password@localhost/roundcubemail';
$config['debug_level'] = 4;

 

[UFHH01]

args... sorry... my fault.... pls. include as attachment for further investigations:

"defaults.inc.php" from "/usr/share/psa-roundcube/config"

 

[Bart_NL]

No problem,

Hereby, I changed it to .txt to upload it.
I never changed it, so it sould be default from installing 17.8.5

 

[UFHH01]

Hi Bart_NL,

pls. make a backup of your "defaults.inc.php" and consider to change afterwards:

$config['smtp_server'] = 'ssl://localhost';

to

$config['smtp_server'] = 'tls://localhost';

I addition, I recommend to setup:

$config['smtp_server'] = 'ssl://localhost';

to

$config['smtp_server'] = 'tls://localhost';

and

$config['smtp_port'] = 465;

to

$config['smtp_port'] = 587;

Pls. report back with your new test - result, when trying to login.

 

[Bart_NL]

For the first smtp_server I think you mean the default server? correct?

I changed the config to and also see file attaced:

$config['default_host'] = 'tls://localhost';
$config['smtp_server'] = 'tls://localhost';
$config['smtp_port'] = 587;

Now I get a code 500, Internal Server Error
But no entry in /var/log/plesk-roundcube/errors

 

[UFHH01]

Hi Bart_NL,

you stated:

I never changed it, so it sould be default from installing 17.8.5

... but if I look at standart installations, I see:

...

// ----------------------------------
// IMAP
// ----------------------------------

// The mail host chosen to perform the log-in.
// Leave blank to show a textbox at login, give a list of hosts
// to display a pulldown menu or set one host as string.
// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
// Supported replacement variables:
// %n - hostname ($_SERVER['SERVER_NAME'])
// %t - hostname without the first part
// %d - domain (http hostname $_SERVER['HTTP_HOST'] without the first part)
// %s - domain name after the '@' from e-mail address provided at login screen
// For example %n = mail.domain.tld, %t = domain.tld
// WARNING: After hostname change update of mail_host column in users table is
//          required to match old user data records with the new host.
$config['default_host'] = 'localhost';
@include "/etc/psa-webmail/roundcube/mailhosts.php";

// TCP port used for IMAP connections
$config['default_port'] = 143;

.....

and

...

// IMAP AUTH type (DIGEST-MD5, CRAM-MD5, LOGIN, PLAIN or null to use
// best server supported one)
$config['imap_auth_type'] = null;

// IMAP socket context options
// See http://php.net/manual/en/context.ssl.php
// The example below enables server certificate validation
//$config['imap_conn_options'] = array(
//  'ssl'         => array(
//     'verify_peer'  => true,
//     'verify_depth' => 3,
//     'cafile'       => '/etc/openssl/certs/ca.crt',
//   ),
// );
$config['imap_conn_options'] = null;

...

and

...

// ----------------------------------
// SMTP
// ----------------------------------

// SMTP server host (for sending mails).
// To use SSL/TLS connection, enter hostname with prefix ssl:// or tls://
// If left blank, the PHP mail() function is used
// Supported replacement variables:
// %h - user's IMAP hostname
// %n - hostname ($_SERVER['SERVER_NAME'])
// %t - hostname without the first part
// %d - domain (http hostname $_SERVER['HTTP_HOST'] without the first part)
// %z - IMAP domain (IMAP hostname without the first part)
// For example %n = mail.domain.tld, %t = domain.tld
$config['smtp_server'] = 'localhost';

// SMTP port (default is 25; use 587 for STARTTLS or 465 for the
// deprecated SSL over SMTP (aka SMTPS))
$config['smtp_port'] = 25;

...

( but on standart Debian/Ubuntu - based systems )​

 

[Bart_NL]

Im using a CentOS system. I havent changed the files.
I did set up SSL certificate from the Plesk GUI but when you asked me to open the file it was the first time i've opened it..

I'll try the changes als you displayed now

 

[Bart_NL]

Oké, now it works, see file.

Still strange that I haven't changed anything in this file, the first file I send was how the file was after the initial installation and my default settings via the Plesk GUI.
Thats why I reported it as a bug, when changing config myself I wouldn't sent it in a a bug.

I can work now, thanks!

 

[UFHH01]

Hi Bart_NL,

there is still the possibility, that you hit a bug, as the Plesk developers have to investigate, why you experienced the described issue, even that you didn't touch the config - files manually.

 

[Bart_NL]

Hi Bart_NL,

there is still the possibility, that you hit a bug, as the Plesk developers have to investigate, why you experienced the described issue, even that you didn't touch the config - files manually.

Thanks for your support!

 

[Bart_NL]

Had the update to #Plesk Onyx 17.8 Preview 8 and roundcube didnt work anymore...

Same issue, most be something with de default config file becauce it was overwritten...

 

[Bart_NL]

Update to#Plesk Onyx 17.8 Preview 9, same issue... Please fix this!

 

[virtubox]

Update to#Plesk Onyx 17.8 Preview 9, same issue... Please fix this!

If you only use Roundcube as a webmail (without other functionalities), I recommend you to take a look on RainLoop Webmail or WebMail Lite 8 (Beta).
You can easily install them on the subdomain of your choice and register them as additional webmails in Plesk. Both of them are just awesome compared to roundcube

 

[Bart_NL]

If you only use Roundcube as a webmail (without other functionalities), I recommend you to take a look on RainLoop Webmail or WebMail Lite 8 (Beta).
You can easily install them on the subdomain of your choice and register them as additional webmails in Plesk. Both of them are just awesome compared to roundcube

Thanks for the information! Wil take a look at RainLoop, it looks quite nice.

However, that still doenst resolve the bug with roundcube that the plesk developers has to check and fix.

 

[Liwindo]

Same error with 17.8.11 Update 1 here and also the same results when trying to fix it.

 

[cosmonaut]

Same here with 17.8.11 Update 1 :-(

 

[Antonio_Andina_Pebavad]

in /usr/share/psa-roundcube/config/defaults.inc.php

moved
'verify_peer' => true,

to

'verify_peer' => false,

 

[nilsringersma_nl]

Confirming this issue on 17_8_11, default config was changed on update.