Welcome Guest. Please Login or Register  


You are here: Index > Webuzo > General Support > Topic : PHP 5.6 and SSL/TLS email authentication



Threaded Mode | Print  

 PHP 5.6 and SSL/TLS email authentication, With the new one PHP 5.6 email authentication SSL/TLS not work anymore. (7 Replies, Read 52729 times)
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Hi,
i see now is avaiable the version 5.6 of PHP.

Now in my server VPS I'M using PHP 5.5 and I'M interested on upgrade. I know what to do in Webuzo to Upgrade and set PHP 5.6 as default but i see i had some issue.

I'M using Hesk Help Desk (an Open source avaible in Webuzo script) well, in email settings i have setup my email created with Webuzo for receve and send email (IMAP and SMTP)

If i make the test for see if Authentication works, if i have active PHP 5.5 all work, if i make this test with PHP 5.6 email authentication fails.

This is because i think PHP 5.6 check for the certificate and I use self signed certificate. So can be this fixxed in some way? How i can authenticate using a selfsigned certificate on PHP 5.6?

Thanks.


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

PHP 5.6 and SSL/TLS email authentication
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
The reply of Hesk owner and the discussion about PHP 5.6 and Authentication issue with email SSL / TLS is here:
http://developers.phpjunkyard.com/viewtopic.php?f=13&t=5043&sid=5775a938c79f263ec5ad0615ea171184&p=22930#p22930

Is not just an Hesk problem, will be a problem also for all plug in who are tring to send email with custom SMTP settings or receving email from POP3.

I have tested also in a new installation of webuzo with the last Apache 2 set by default.. and php 5.6 who i had installed and still have issue with PHP 5.6.

Can be possibile because I'm tring to use my email with certificate created by my Existing webuzo server so maybe certificate Self Signed must be regenerated after activating Apache 2 and last Open SSl and PHP?


For now I'm unable to use Apache 2 because when i activate it on my existing webuzo server all website who are started with Apache not work so i must use Apache and not Apache 2.
I have opened a webticket at your support and you say you will try to reproduce and suggest for now to continue to use Apache 2.2.29

But with PHP 5.6? Are normal i can't set as default as if i use SMTP or POP authentication this stop to work? I don't know.. where ask for support on this. For now i can continue to use PHP 5.5 but in future? Will be not obsolete?


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

PHP 5.6 and SSL/TLS email authentication
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
The issue is:

if i use the my domain email managed by webuzo when the client like K-9 mail or Thunderbird try to connect with my smtp or imap i see the warning about wrong certificate Self Signed certificate.

In this client i can presso acept and i had solved but in the case of PHP 5.6 how to fix this? Because if PHP 5.6 set the check of the TLS / SSL certificate and if is not valid not connect.. I will unable to use my email managed by webuzo as hesk email support for example or as SMTP email in Wordpress ETC.

For skip the certificate warning when i use the emails managed by webuzo what i have to do? Maybe problem is not only PHP 5.6 but mail too. For my client on my PC no really issue because i can skip by alowing the Self Signed certificate but for PHP 5.6?

Thanks


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

PHP 5.6 and SSL/TLS email authentication
valley
Group: Webuzo Team
Post Group: Super Member
Posts: 1644
Status:
We shall replicate the issue and provide a solution ASAP.
Apology for the inconvenience caused.

-----------------------
Webuzo : Single User Control Panel
Join Webuzo :
Facebook
Twitter

IP: --   

PHP 5.6 and SSL/TLS email authentication
wolke
Group: NOC
Post Group: Elite Member
Posts: 437
Status:
PHP 5.6 changed the way how remote certificates are verified. This applies to client stream wrappers. So if you connect with PHP 5.6 to anything with SSL, it expects the cert to be valid (not self -signed)

This behaviour can be changed, see:
http://php.net/manual/en/migration56.incompatible.php
IP: --   

PHP 5.6 and SSL/TLS email authentication
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
I have set all my email to use my SSL certificate who is valid and is also used for my website. With PHP 5.5 all works fine, if I set as default PHP 5.6 all SMTP and Incoming mail stop to works.

Wordpress, Ticket, Live chat cannot connect again to mail.
I need understand how to fix this.


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

PHP 5.6 and SSL/TLS email authentication
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
I see there are also other user who migrate from PHP 5.5 to PHP 5.6 who have issues. This can be the new edit of PHP code but really need to understand how is possible to make PHP 5.6 and also PHP 7 work with email.

This is a discussion on Live Helper Chat https://forum.livehelperchat.com/viewtopic.php?id=1889 where I try also to help users.

Maybe the user who opened this topic is not a Webuzo customer or maybe yes, I don't know... the important things for now is understand how is possible work with PHP 5.6 or PHP 7 and check all can work well in Webuzo with actual Exim and Dovecot.

Thank you!


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

PHP 5.6 and SSL/TLS email authentication
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Solution here: http://www.softaculous.com/board/index.php?tid=7440&title=Problem_with_SSL_and_PHP_5.6


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

« Previous    Next »

Threaded Mode | Print  



Jump To :


Users viewing this topic
1 guests, 0 users.


All times are GMT. The time now is March 28, 2024, 12:46 pm.

  Powered By AEF 1.0.8 © 2007-2008 Electron Inc.Queries: 11  |  Page Created In:0.019