Re: Squirrelmail on perdition
Simon Horman <[email protected]>
| Newsgroups | gmane.mail.perdition.user |
|---|---|
| Message-ID | <[email protected]> |
On Fri, Nov 12, 2010 at 01:28:29PM -0600, [email protected] wrote: > I have to login twice after each logout using squirrelmail located on the > same server as perdition. The mail stores are on two other servers. > > I am left with this on squirrelmail after first aatempt: > > SquirrelMail version 1.4.8-5.el5.centos.10 > By the SquirrelMail Project Team > ERROR > Your session has expired, but will be resumed after logging in again. > Go to the login page Hi John, I wonder if the problem you are seeing relates to the bug fixed by the following patch which was included in 1.19-rc3. # HG changeset patch # User Simon Horman <[email protected]> # Date 1280280523 -32400 # Node ID 6d85be38374c6aed3532219443370b95bf0cd128 # Parent 8fc81b8203539801a0900c7e133ccb198c60cd3e ssl: Set session_id This allows session re-negoatiation to work in conjunction with the verification of client certificates. In particular, it allows Thunderbird 3.1 to connect to perdition using TLS. An alternate work-around is to disable all certificate verification using --ssl_no_client_cert_verify or disable client certificate verification using --ssl_no_cert_verify (introduced in 1.19-rc1). This relates to Mozilla Bug #575915 https://bugzilla.mozilla.org/show_bug.cgi?id=575915 Tested-by: John Feuerstein <[email protected]> Signed-off-by: Simon Horman <[email protected]> diff -r 8fc81b820353 -r 6d85be38374c perdition/ssl.c --- a/perdition/ssl.c Mon Jul 26 15:29:04 2010 +0900 +++ b/perdition/ssl.c Wed Jul 28 10:28:43 2010 +0900 @@ -528,6 +528,14 @@ return NULL; } + /* Set context for session */ + if (!SSL_CTX_set_session_id_context(ssl_ctx, + (unsigned char *)PACKAGE, + strlen(PACKAGE))) { + VANESSA_LOGGER_DEBUG("SSL_CTX_set_session_id_context"); + goto err; + } + /* * Set the available ciphers */ ______________________________________________ Perdition-users mailing list [email protected] http://lists.vergenet.net/listinfo/perdition-users