webmail using https://

[BurrellS]

We recently migrated to Plesk v11 from Plesk v9.5.

One feature I notice is broken or not working properly on our new Plesk v11 server is that secure webmail no longer works properly. Accessing the webmail securely (using https://) worked fine on Plesk v9.5.x, but on our new Plesk v11 server, the webmail doesn't seem to be working properly or configured correctly when accessing it that way. Images are broken links, and stylesheets seem to be missing resulting in improperly displayed pages.

The webmail does work normally when accessing it without SSL, so it seems to be something related to paths or something on the https side.

Any suggestions or fixes anyone has found for this?

thank you!

 

[Nikolay.]

Seems like it might be related to nginx. Try disabling it (in Services Management) and tell us whether it helped you.

 

[BurrellS]

That looks to have fixed the problem! Thank you!

Are there any negative side effects to having nginx disabled on this server now?

 

[abdi]

That looks to have fixed the problem! Thank you!

Are there any negative side effects to having nginx disabled on this server now?

BurrellS, no there are no negative side effects of-course. Nginx just adds value to your service by reducing the load on apache. But if you are alone on the server then Its OK really to not run Nginx.

 

[BurrellS]

Ok thank you for your response! Ideally I would like to keep Nginx enabled and yet still have the webmail accessible in a secure manner. Any suggestions or ideas would be appreciated.

 

[abdi]

BurrellS, within the folder:

/usr/local/psa/var/certificates

You will find a number of SSL certificates ...Please edit all the files and replace the materials in them with your own SSL certificates.

That should effect https://webmail.yourdomain with or without Nginx. Let me know if that helps you out ..

NB: remember to restart Apache & Nginx after making those changes

 

[abdi]

BurrellS, am so sorry that does not solve the problem of missing pictures and files not loading while Nginx is enabled. I just noticed after testing it on my server ...

If someone knows how, good..however I would also recommend you create a domain name such as http://mail.yourdomain.com that then you can secure and on it install Horde, or a better mail client like RoundCube then you can install your SSL on it.

I did that with our company mail client: http://mail.theg7.com/ you may take a look ...

 

[WernerD]

horde + ssl + Nginx

Files greater 1 kb like pictures and css will force a 404 error, if Nginx is turned on with horde webmail.
(PLESK 11 patch #10 on UBUNTU server 12.04 LTS)
I stopped the service. Horde works (https://webamil ...)
Is there a solution to work with activated Nginx ?

 

[WernerD]

I added another server section for port 443 in /opt/psa/admin/conf/generated/last_nginx.conf as work-around:

server {
listen <ip>:443 default_server ;
ssl_certificate /opt/psa/var/certificates/certq1KdfkK;
ssl_certificate_key /opt/psa/var/certificates/certq1KdfkK;
ssl_session_timeout 5m;

ssl_protocols SSLv2 SSLv3 TLSv1;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;

location / {
proxy_pass https://127.0.0.1:7081;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

I know, this is a simple temporary work-around, only ..... because it will be overwritten the next time ...

werner

 

[Kartoffelsack]

BurrellS, no there are no negative side effects of-course. Nginx just adds value to your service by reducing the load on apache. But if you are alone on the server then Its OK really to not run Nginx.

I also tried disabling nginx (stopping it via web interface) and webmail worked flawlessly after that. But all other domains were broken! None of the installed domains or subdomains was delivered correctly tio client, all served the default plesk page, grabbed from "/var/www/vhosts/default/htdocs/".
What else do I have to do to disable nginx completely without breaking apache?

 

[JohannG]

I can see the same issue. As soon as i activate nginx, the https:// version of horde webmail gets broken and is showed like on the attached picture. CSS of the menu on the left side seem to not get loaded at all and also some images like the Parallels logo.

I'm looking forward to an update or an easy fix.

 

[Kartoffelsack]

In the meantime I found a solution for the problem of broken webistes after disabling nginx. The config had to be rebuilt and everything went fine again. Now I'm running the server without nginx and am able to serve webmail via SSL flawlessly.

 

[GunFood]

I had the same issue. But I don't want to disable nginx. This can't be the solution!

So I checked the nginx error.log and found:

2012/10/22 17:02:49 [error] 2268#0: *101162 open() "/var/www/vhosts/domain.de/httpdocs/themes/silver/screen.css" failed (2: No such file or directory), client: 1.1.1.1, server: domain.de, request: "GET /themes/silver/screen.css HTTP/1.1", upstream: "https://127.0.0.1:7081/themes/silver/screen.css", host: "webmail.domain-c.de", referrer: "https://webmail.domain-c.de/kronolith/"

And some other messages. So I took all the folders from /usr/share/psa-horde and copied them to /var/www/vhosts/domain.de/httpdocs

domain.de is my primary domain. domain-c.de is another domain on my server I use for testing. I don't know why it referrs to the folder, but after this, everything is fine using https for my webmail.

@WernerD

copy /usr/local/psa/admin/conf/templates/default/nginxDomainVhost.php to  /usr/local/psa/admin/conf/templates/custom/domain/nginxDomainVirtualHost.php

and make your changes here. After a

/usr/local/psa/admin/bin/httpdmng --reconfigure-all

all your settings will be applied to all client domains. And they remain, even httpd or plesk will be updated.