1 Topic by bolinches

  • bolinches
  • Member
  • Offline
  • Registered: 2019-01-20
  • Posts: 42

Topic: License information error

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):  1.3.2
- Deployed with iRedMail Easy or the downloadable installer? No
- Linux/BSD distribution name and version: FreeBSD 12.2
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):  MariaDB
- Web server (Apache or Nginx): Ngninx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

When clicking on the License info on top right I get the following


License
Error while getting license info: %3Curlopen%20error%20%5BSSL%3A%20CERTIFICATE_VERIFY_FAILED%5D%20certificate%20verify%20failed%3A%20unable%20to%20get%20local%20issuer%20certificate%20%28_ssl.c%3A1091%29%3E

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,082

Re: License information error

Are you running Python 3 with iRedAdmin(-Pro) or Python 2?
Do you have all installed packages up to date?

3 Reply by bolinches

  • bolinches
  • Member
  • Offline
  • Registered: 2019-01-20
  • Posts: 42

Re: License information error

Python 3

Updated last friday all the OS packages. If you are looking for a certain package tell me and I can tell which level I am on

4 Reply by bolinches

  • bolinches
  • Member
  • Offline
  • Registered: 2019-01-20
  • Posts: 42

Re: License information error

Hi

SO how to I get now updated to 4.8? Could you please pass me the update link via email? Thanks

5 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,082

Re: License information error

Dear Bolinches,

Download link of the latest iRedAdmin-Pro has been sent to registered license owner (blb@).
Contact us if you didn't receive it: https://www.iredmail.org/contact.html

6 Reply by bolinches

  • bolinches
  • Member
  • Offline
  • Registered: 2019-01-20
  • Posts: 42

Re: License information error

Thanks

I got it and 4.8 is installed without any problems. I still get the same issue. Could you publish here or privately the URL that is being queried so I will check it from shell with curl?

I suspect the libreSSL CA on FreeBSD 12 (in my box) might not have the needed CA authorities for that server/cert

Thanks

7 Reply by GerryM

  • GerryM
  • Member
  • Offline
  • Registered: 2014-06-26
  • Posts: 51

Re: License information error

I think there were certificate updates when I did freebsd-update on my 12.2 install.

8 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,082

Re: License information error

GerryM wrote:

I think there were certificate updates when I did freebsd-update on my 12.2 install.

It's https://lic.iredmail.org/

9 Reply by bolinches

  • bolinches
  • Member
  • Offline
  • Registered: 2019-01-20
  • Posts: 42

Re: License information error

Hi

update time and again this issue. It is on Python URLLIB call. I "bypassed" the problem modifying /usr/local/www/iredadmin/libs/sysinfo.py

At the beginning

import ssl

On get_license_info fucntion

in the try:

        urlopen = __get_proxied_urlopen()
        ctx = ssl.create_default_context()
        ctx.check_hostname = False
        ctx.verify_mode = ssl.CERT_NONE
        _json = urlopen(url, context=ctx).read()

SUre not SSL does not get checked ... but it is only for that specific request and seems to be rather harmless info on the JSON it pulls

Anyone an idea how to add the CA used on lic.iredmail.org into python??

Thanks

10 Reply by bolinches

  • bolinches
  • Member
  • Offline
  • Registered: 2019-01-20
  • Posts: 42

Re: License information error

Well ... happier now

on 4.9
# python -c "import ssl; print(ssl.get_default_verify_paths())"
DefaultVerifyPaths(cafile='/usr/local/etc/ssl/cert.pem', capath='/usr/local/etc/ssl/certs', openssl_cafile_env='SSL_CERT_FILE', openssl_cafile='/usr/local/etc/ssl/cert.pem', openssl_capath_env='SSL_CERT_DIR', openssl_capath='/usr/local/etc/ssl/certs')

Those pem files are empty ... just comments
cd /usr/local/etc/ssl/
mv cert.pem cert.pem_ORIG
ln -sf ../../share/certs/ca-root-nss.crt cert.pem

I believe for me this was introduced on 12.2

11 Reply by bolinches

  • bolinches
  • Member
  • Offline
  • Registered: 2019-01-20
  • Posts: 42

Re: License information error

I consider this answered, not sure how I can mark it as such

12 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,082

Re: License information error

Did you try to upgrade Python release or the url related module(s)?

13 Reply by bolinches

  • bolinches
  • Member
  • Offline
  • Registered: 2019-01-20
  • Posts: 42

Re: License information error

ZhangHuangbin wrote:

Did you try to upgrade Python release or the url related module(s)?

Sure from 2 to 3 and then whenever there is an update that comes into montly update cycle

But that change was when I moved from 11 to 12.2