1 Topic by propertunist

  • propertunist
  • Member
  • Offline
  • Registered: 2012-10-17
  • Posts: 16

Topic: iredadmin not accessible on nginx / centos

==== Required information ====
- iRedMail version: 0.8.3
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Linux/BSD distribution name and version: Centos 6.4
- Related log if you're reporting an issue:
====

greetings!
i have been using iredmail for 18 months plus.. and not needed to use iredadmin since i set the server up.
now i have come to login to iredadmin and it is unreachable - i do not know why.
i looked through the nginx logs and see:

[error] 2520#0: *3 directory index of "/var/www/html/" is forbidden, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.1", host: "iredadmin"
2013/06/30 01:21:42 [error] 2520#0: *24 no "ssl_certificate" is defined in server listening on SSL port while SSL handshaking, client: xx.xx.xx.xx, server: 0.0.0.0:443

i have checked the paths for the SSL files and the files exist.. i have also checked and changed the permissions for various folders and even the entire www folder.. but nothing changes for iredadmin.
i have used the nginx config for iredadmin that is on the nginx site here: http://wiki.nginx.org/IRedMail

does anyone have any advice as to how to resolve this?
thanks

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,091

Re: iredadmin not accessible on nginx / centos

propertunist wrote:

2013/06/30 01:21:42 [error] 2520#0: *24 no "ssl_certificate" is defined in server listening on SSL port while SSL handshaking, client: xx.xx.xx.xx, server: 0.0.0.0:443

It's clear in the log, no "ssl_certificate" in defined server listening on SSL port.

3 Reply by propertunist

  • propertunist
  • Member
  • Offline
  • Registered: 2012-10-17
  • Posts: 16

Re: iredadmin not accessible on nginx / centos

the values assigned for ssl certificates in the iredadmin virtual site config for nginx are valid paths and files as far as i know:
       ssl_certificate /etc/nginx/ssl/iredadmin.crt;
       ssl_certificate_key /etc/nginx/ssl/iredadmin.key;

both files exist at those locations and contain key data.

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,091

Re: iredadmin not accessible on nginx / centos

Are they defined in "server" section which listening on SSL port? Could you please show us your Nginx config file to help troubleshoot?

5 Reply by propertunist

  • propertunist
  • Member
  • Offline
  • Registered: 2012-10-17
  • Posts: 16

Re: iredadmin not accessible on nginx / centos

sure:

server {
        listen 443 ssl; ## listen for ipv4; this line is default and implied
       access_log /var/log/nginx/iredadmin/logs/access.log;
        error_log /var/log/nginx/iredadmin/logs/error.log;
       ssl_certificate /etc/nginx/ssl/iredadmin.crt;
       ssl_certificate_key /etc/nginx/ssl/iredadmin.key;
       ssl_session_timeout 5m;
       ssl_protocols SSLv3 TLSv1;
       ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
       ssl_prefer_server_ciphers on;

        server_name iredadmin;

        location / {
        root /var/www/iredadmin/;
        uwsgi_pass unix:///var/run/uwsgi/app/iredadmin/iredadmin.socket;
        uwsgi_param UWSGI_PYHOME /var/www/iredadmin/python-home;
        uwsgi_param UWSGI_CHDIR /var/www/iredadmin;
        uwsgi_param UWSGI_SCRIPT iredadmin;
        include uwsgi_params;
        }

        location /static {
        alias /var/www/iredadmin/static/;
            }

        location ~ /\.ht {
                deny all;
        }
}

---
i just realised i'm not sure if the uwsgi parts are appropriate.. i don't think i have ever seen a uwsgi service or similar on the server. i'm obviously still learning here. wink