[otrs] Perl SSL error is keeping me from loving OTRS

[jose.s...@accenture.com]

I feel as if I have finally found the root cause of all my issues. I found this in the PerlEX log: Can someone tell me how to force Perl to not require SSL or configure OTRS to use it? I would much rather NOT use it, but finding the “off” switch in Perl has proven troublesome. As always, any assistance you can provide is very appreciated.

 

*** 'C:\otrs\OTRS\bin\cgi-bin\index.pl' log message at: 2013/08/21 07:10:26

[Wed Aug 21 07:09:37 2013] -e: *******************************************************************

[Wed Aug 21 07:09:37 2013] -e:  Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client

[Wed Aug 21 07:09:37 2013] -e:  is deprecated! Please set SSL_verify_mode to SSL_VERIFY_PEER

[Wed Aug 21 07:09:37 2013] -e:  together with SSL_ca_file|SSL_ca_path for verification.

[Wed Aug 21 07:09:37 2013] -e:  If you really don't want to verify the certificate and keep the

[Wed Aug 21 07:09:37 2013] -e:  connection open to Man-In-The-Middle attacks please set

[Wed Aug 21 07:09:37 2013] -e:  SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.

[Wed Aug 21 07:09:37 2013] -e: *******************************************************************

 

 

Jose Salviati

Technology Consulting | Workplace Technology & Collaboration

Direct Dial:  (310) 726-2835

Mobile:        (949) 829-1028

Email:          Jose.S...@Accenture.com

 

---

This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited.

Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy.

______________________________________________________________________________________

www.accenture.com

[Gerald Young]

https://www.google.com/search?q=Using+the+default+of+SSL_verify_mode+of+SSL_VERIFY_NONE+for+client

Summary: Something not displayed here is using SSL connection. Likely suspects: IMAPS, POP3S

---------------------------------------------------------------------
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

[jose.s...@accenture.com]

That’s got to be it! We are using Office365 for email which certainly would require SSL. So, I can shut off email and get OTRS to work, but I guess the bigger question then is what steps do I need to take to get email to work when SSL is required by IMAPS?

 

Gerald – thank you for your help. I have been fighting this for almost a month and it feels GREAT to finally find the root cause!

 

Jose

[Gerald Young]

If you're willing to take a look at an alternative option that will make tickets immediately instead of polling ... http://forums.otterhub.org/viewtopic.php?f=60&t=20319

Summary: the email gets forwarded to your OTRS SMTP server and runs the processing script. It may sound daunting, but immediate ticket creation is worth it.

[jose.s...@accenture.com]

This is great Gerald. I am going to just shut down notifications for now and move forward configuring OTRS. I am going to hold on to this option in the event we want email notification and email ticket creation. I think this is a bit simpler than fighting Office365. Thank you again for the support!

[Renee B]

On 21.08.2013 20:35, jose.s...@accenture.com wrote:
> That's got to be it! We are using Office365 for email which certainly would require SSL. So, I can shut off email and get OTRS to work, but I guess the bigger question then is what steps do I need to take to get email to work when SSL is required by IMAPS?
>

This is from the current sources:

# connect to host
my $IMAPObject = Net::IMAP::Simple->new(
$Param{Host},
timeout => $Param{Timeout},
debug => $Param{Debug},
use_ssl => 1,
ssl_options => [
SSL_verify_mode => IO::Socket::SSL::SSL_VERIFY_NONE(),
],
);


The "ssl_options" are the important part... Please check your OTRS sources.

- Renée

--
Perl / OTRS development: http://perl-services.de
OTRS AddOn repository: http://opar.perl-services.de

[Michiel Beijen]

Please note that this is just a WARNING. It's not an error - apart from filling up your log file it does not hurt.

You'd only see this error message if you have a new enough IO::Socket::SSL installed.

Also, in upcoming OTRS 3.3.x we've made changes to how we handle SSL connections so you won't see this warning message anymore.

Michiel Beijen
Senior Developer
 
OTRS BV
Schipholweg 103
2316 XC Leiden
The Netherlands
 
T: +31 71 8200 255
I: http://www.otrs.com
 
OTRS 3.2 - More than a Help Desk System – Process and Customer Management – Be an early bird with our special offer - http://j.mp/11TFPSr

[jose.s...@accenture.com]

Thanks very much for the reply Michiel! It’s possible this error is not related to my issue, but anytime I enter my email information (using Office365) I get this logged error and no emails. Additionally, I get a consistent application error anytime I try to enter data making OTRS un-usable. I am now working without email but would certainly prefer to have it operating! The error I get within OTRS any time I add my email server is “Script failed to send data”.

 

From: otrs-b...@otrs.org [mailto:otrs-b...@otrs.org] On Behalf Of Michiel Beijen
Sent: Sunday, August 25, 2013 11:31 AM
To: User questions and discussions about OTRS.
Subject: Re: [otrs] Perl SSL error is keeping me from loving OTRS

 

Please note that this is just a WARNING. It's not an error - apart from filling up your log file it does not hurt.