fsockopen function disabled - ssl

[ineo]

Hi,

Thanks for reading this message. Some time now I experience problem when I want to connect to an imaps enabled server where this server
uses a certificate that is created with the help of my own created CA (Certificate Authority) This problem is related to php version higher then
5.6 and there is a Debian bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750890 gives an indeep description

-- error --
errors:[08-Sep-2014 09:51:36 +0200]: IMAP Error: Login failed for user@domain.root from x.x.x.x. Could not connect to ssl://mailserver.domain.root:993: Unknown reason (fsockopen() function disabled?) in /[path]/roundcube/program/lib/Roundcube/rcube_imap.php on line 184 (POST /dev/roundcube/?_task=login?_task=login&_action=login)

I have tryed a couple of roundcube version from 8.7 - 1.0.2 and all have the same problem. Is there a way to make roundcube aware of the
fact that it has to check the personal CA for example via the openssl.capath variable in php.ini?

One thing I want to point, when one uses the account plugin (identities_imap) this problem doesn't occur. So maybe the function that is used in
the plugin may give some information how to solve this.

The function that is the reason for all these problems is: https://wiki.php.net/rfc/tls-peer-verification

Hope somebody has a solution

[JohnDoh]

see this ticket http://trac.roundcube.net/ticket/1489948

the options have been added in git-master and will also be in 1.0.3

[ineo]

Thanks for the reply, I'll give the git-master a try, after I have found the git location.

[ineo]

With the git version every thing is working again 

With the current release you have to do some cut and past to make the ssl feature active and when you make sure your CA is installed and configured in the right way to use them or otherwise disable the ssl option in your config file.

when you want to check if you CA is working in the right way, you can use the following command.

openssl s_client -CApath /etc/ssl/certs (on debian) -connect imap.server.root:993

Thanks for all the development.