Text only | Text with Images

OPNsense Forum

English Forums => 24.7, 24.10 Legacy Series => Topic started by: opns_neuling on June 17, 2024, 11:32:58 AM

Title: update 23.7 -> 24.1 problem with haproxy / ssl / tls
Post by: opns_neuling on June 17, 2024, 11:32:58 AM
Hello Community,
As the title suggests, after an upgrade, the IMAP(993) reverse proxy (with haproxy) no longer works for me.
I remember reading that old ciphers were deactivated, tls1.X, etc.
Unfortunately, I can't find a proper way to temporarily get IMAP working again until I have updated the IMAP server.
Any suggestions? Keywords?
Thanks in advance,
Title: Re: update 23.7 -> 24.1 problem with haproxy / ssl / tls
Post by: newsense on June 17, 2024, 07:22:07 PM
HAProxy is a plugin and it might not be available until 24.7 is released.

If you have time to test then it may be worth opening a ticket on Github in the Plugins section, else reinstall 24.1 and restore the config
Title: Re: update 23.7 -> 24.1 problem with haproxy / ssl / tls
Post by: bettingweb33 on September 30, 2024, 06:07:19 AM
It sounds like your issue may be related to outdated TLS configurations after the upgrade. Since older ciphers and TLS versions have likely been disabled for security reasons, you'll need to either re-enable them temporarily or update your IMAP(xaslarbet.com (http://xaslarbet.com)) server to support modern ciphers.
Text only | Text with Images