Topic: SSL Error on Iphone iOS 9 OX Capitan

[janet]

Brenno

Perhaps you missed this advice.
ALWAYS disconnect USB drives when doing upgrades, particularly when installing new OS's.
If not you risk the USB drive being included in the RAID array, (even as a spare).
You better check the USB drive just in case.

Otherwise as indentified the system is just trying to boot to USB.

Good that the SME upgrade did resolve the iOS 9 issue.

[Brenno]

Janet,

I definitely unplugged the USB drive before I performed the upgrade because I didn't want to risk the integrity of the data that was on it.  After the upgrade, during the first reboot, I plugged the USB drive back in and it said that the disk hadn't been checked in 537 days and it was forcing a check.  I waited that out and the bad superblock error showed up after loading udev (I think).  I rebooted the machine and it proceeded normally to a login prompt so I dismissed it as perhaps a temporary glitch.

Then, after getting yum to run, I had to reboot again and that's when I got stuck and couldn't get past the bad superblock error.

Output of df -h is:

Code: [Select]

[root@mail ~]# df -h
Filesystem              Size  Used Avail Use% Mounted on
/dev/mapper/main-root
                      266G  177G   76G  71% /
/dev/sda1              99M   20M   75M  21% /boot
none                  4.0G     0  4.0G   0% /dev/shm
/dev/sdb1             917G  230G  641G  27% /mnt/affa

Perusal of the contents of /mnt/affa look as expected, so hopefully everything is OK.  Will know more when AFFA runs tomorrow AM.

[stefan24]

I can confirm, that SME server 7.6 (certainly not the latest patchlevel) with two devices just upgraded to IOS 9 does not work using SSL (server xx.xx.xx.xx not responding). So I backed up the server last night, restored it to existing (new) SME 8.1 server, I had already prepared and IOS9 devices could connect to the 8.1.

BTW: sending mails from that IOS9 devices was okay in SME 7.6 (I know, that's another protocol).

[CharlieBrady]

I can confirm, that SME server 7.6 (certainly not the latest patchlevel) with two devices just upgraded to IOS 9 does not work using SSL (server xx.xx.xx.xx not responding).

Please do a tcpdump packet capture while that "not responding" error is occurring. We need to know what "not responding" means.

[CharlieBrady]

Looks like it is happening not just with SME server:

http://apple.stackexchange.com/questions/206448/imap-account-stopped-working-after-upgrade-to-ios-9-problem-with-cacert-certif

Note the report that even imap.gmail.com can show a problem.

So it looks like iOS9 doesn't properly report untrusted certificates following STARTTLS over IMAP.

[edb]

I had this issue as well with the Apple iOS 9 update and it was resolved by installing the e-smith-pop3-2.2.0-8.el5.sme update on my SME8x server.
User suddenly were unable to retrieve POP3 port 995 email but they could send email fine on port 465.
I do beleive it is an SSL issue that was resolved by the POP3 update.

[CharlieBrady]

Your report is about a totally different scenario, you are using SME7.6, seb is using SME8.1 (by assumption of course as the post was in the SME8 forum & the server is fully updated).

Now you are jumping to conclusions. Seb never said that the server was fully updated, and apparently it wasn't.

[janet]

Now you are jumping to conclusions. Seb never said that the server was fully updated, and apparently it wasn't.

Well I did say "assumption".
....and my comment appears to have prompted seb to supply more specifc details not previously supplied ie that it was a SME 7.2 server.

[seb]

Hi Guys,
after my upgrade from 7.2 to 9.0 now i got my iOS 9 working with SSL enabled.
Now i will be up to date on my SME box in order not to get into trouble... and probably try to get the best of it by installing some joomla and sugercrm on it 

thanks Guys!
 

[edb]

So how long will we be able to remain at TLS 1 since most apps in the near future will likely require TLS 1.2 with forward secrecy?
https://blog.winkelmeyer.com/2015/07/update-your-ssl-on-servers-to-support-tls-1-2-before-ios-9-and-os-x-10-11/
This could pose big issues from what I read above as an example but at this point everything still works fine with TLS 1
My understanding is that it won't be doable with SME Server 8x but may be doable with SME version 9x based on CentOS 6.
Just curious but I don't know squat about the potential issues or complications.

Big thanks to the developers for all their hard work!

[janet]

edb

Please post a bug raising your concerns, the devs can take a look at the issues.
Thanks

[Stefano]

My understanding is that it won't be doable with SME Server 8x

it depends on upstream updates..
anyway, SME8 is going to be in maintenance mode, i.e. bugfixing only.. and nowaday installing a new SME8 doesn't make sense since SME9 is the way to go.