What format certificate to use with --ca-file

5

Hi Paul,

did you found a solution for your problem? If have the same issue here on my server.
For me the Option --no-verify-ssl do not work. I always get the error message
HTTP request failed: 500 Can't connect to domain:443 (certificate verify failed). Your webserver logs may have more information or there may be a network problem.

I also tried to use the option --ca-file but the message is the same.
Just for Information, I use a PKI and sign the server certificate there. With several browsers I have no issues detected, so the certificate works.

Any help / idea is welcome.

Regards,
Tom

UPDATE:
@Paul, please have a look at thist post Rt-mailgate ignoring --no-verify-ssl? - #2 by Aaron_C_de_Bruyn

I’m able to get it working with this modification.

use IO::Socket::SSL;
...
   sub get_useragent {
        my $self = shift;
        my $opts = shift;
        my $ua   = LWP::UserAgent->new();
        $ua->agent("rt-mailgate/4.4.2 ");
        $ua->cookie_jar( { file => $opts->{'jar'} } ) if $opts->{'jar'};

        $ua->ssl_opts( SSL_verify_mode => IO::Socket::SSL::SSL_VERIFY_NONE );
        $ua->ssl_opts( verify_hostname => $opts->{'verify-ssl'} );
        $ua->ssl_opts( SSL_ca_file => $opts->{'ca-file'} )
            if $opts->{'ca-file'};

        return $ua;
    }

Test the mail flow:
$ echo "Subject: Testmail" | sendmail -v helpdesk@domain

I got a new ticket on the webpage. happy