Upgraded from Wheezy to Jessie, now roundcube is broken

[SimbaLion]

I updated from wheezy to jessie and roundcube is now broken.

I tested imap using telnet and I was able to log in, but roundcube gives 'connection to storage server failed'.

I enabled imap_debug and the error says could not connect to ssl://domain.com:993: Unknown reason in /path/to/roundcube/program/lib/Roundcube/rcube_imap.php on line 198

If I change the config to use domain.com on port 143 it works, but ssl://domain.com on port 993 doesn't work.

can anyone help me?

[JohnDoh]

What version of Roundcube are you running?

Is there anything in the IMAP server log?

[SimbaLion]

It's version 1.1.2.

The server log doesn't say anything specific.. "connection closed before auth" sometimes.

[JohnDoh]

This is a strange one. I'd expect there to be some useful error message in at least the Roundcube error log or the IMAP server log. Grasping at straws but double check your PHP version (it must be >= 5.3.7) and also that you have the openssl extension installed. If you are not sure then you could try running the Roundcube installer, that will check all the requirements.

[ABerglund]

Jessie may have strengthened the SSL and Diffie-Hellman parameters to combat recent vulnerabilities, and the IMAP server may not use complex enough ciphers to make it happy. I had similar problems with recent email clients. The error messages were similarly unhelpful. Might check this - https://weakdh.org

[JohnDoh]

Are you running Courier?

I was just talking to someone in #roundcube on irc and they had the same "unknown reason" error and they found an error like:

routines:SSL3_READ_BYTES:tlsv1 alert unknown ca

in the courier logs?

[SimbaLion]

It's postfix & dovecot.

Should I be using tls:// instead of ssl://?

[ABerglund]

It's postfix & dovecot.

Should I be using tls:// instead of ssl://?

Depends on what the IMAP server supports.