[Solved] Failed SSL Cert request from Admin UI

Hi,

I have the same problem on my freshly installed Carbonio 23.12. The server is not listening on port 80.

zimbraReverseProxyAvailableLookupTargets looks good, zimbraReverseProxyMailMode is set to redirect. (That's correct on a single server installation, right?) I didn't have to change these settings, but ran zmproxyconfgen anyway, which didn't throw any errors or warnings.

zmproxyctl restart says

Stopping proxy...nginx: [warn] conflicting server name "carbonio.zottel.net" on 0.0.0.0:443, ignored
done.
Starting proxy...nginx: [warn] conflicting server name "carbonio.zottel.net" on 0.0.0.0:443, ignored
done.

Looking through the nginx configs in /opt/zextras/conf/nginx/includes/, I noticed that the only files where a "listen 80" directive is issued are nginx.conf.web.http and nginx.conf.web.http.default, but those are not included anywhere in my configuration. The corresponding include lines in nginx.conf.web are commented out.

Any ideas what could be wrong?

Thanks, Christian

Ah, sorry, it was my problem, I had two misunderstandings in the documentation:

First, I didn't realize that the prov gacf command was a global setting whereas the ms command was a setting local to the server. I thought that if gacf returned redirect, everything must be correct for my server. gs, however, returned https, so that was the problem.

Second, I wasn't sure if my single server system qualified as a "proxy node" as described in the documention, and if the step to delete zimbraReverseProxyMailMode on the proxy nodes would have to executed on my server. When I did that, it worked.

@zottel how did you solved the issue? I have the same issues on restarting my carbonio instance.

@zottel

@uhl-services

yeah, you picked it correctly.

So we could summarize the whole concept as:

1. gcf shows gobal configuration where as gs shows local configuration(node wise)
2. gs becomes more significant in case of single server. We need to keep an eye on gs in case of using an attribute.
3. By default zimbraReverseProxyMailMode inherits value from server and by default carbonio CE stores https as the value of zimbraReverseProxyMailMode.
4. An attribute can be implemented at server level or global level. That's why flags in attributes are important to watch out:

zextras@mail:~$ carbonio prov desc -a zimbraReverseProxyMailMode
zimbraReverseProxyMailMode
    whether to run proxy in HTTPS or redirect mode. See also related
    attributes zimbraMailProxyPort and zimbraMailSSLProxyPort

               type : enum
              value : https,redirect
           callback :
          immutable : false
        cardinality : single
         requiredIn :
         optionalIn : server,globalConfig
              flags : serverInherited
           defaults : redirect
                min :
                max :
                 id : 685
    requiresRestart : nginxproxy
              since : 5.0.7
    deprecatedSince :

zextras@mail:~$
zextras@mail:~$
zextras@mail:~$ carbonio prov gcf zimbraReverseProxyMailMode
zimbraReverseProxyMailMode: redirect
zextras@mail:~$
zextras@mail:~$
zextras@mail:~$ carbonio prov gs $(hostname -f) zimbraReverseProxyMailMode
# name mail.ub22ce24121.xyz
zimbraReverseProxyMailMode: https

zextras@mail:~$

regards,