Skip to content

Instantly share code, notes, and snippets.

@gionn
Last active December 12, 2015 07:38
Show Gist options
  • Save gionn/4737529 to your computer and use it in GitHub Desktop.
Save gionn/4737529 to your computer and use it in GitHub Desktop.
Zimbra ignore invalid certificate

Zimbra: how to skip validation for self-signed or invalid certificates

Zimbra 8 will refuse to fetch emails from external accounts if the remote server is using a self-signed (or invalid) SSL certificate. Hence this is a good thing in terms of security, sometimes it isn't possible to control how external mail providers is handling their things.

This limitation is active even if "Use an encrypted connection (SSL) when accessing this server" isn't checked, since Zimbra will automatically use STARTTLS if detects that remote server support it.

$ sudo -i -u zimbra 
$ zmlocalconfig -e javamail_imap_enable_starttls=false
$ zmlocalconfig -e javamail_pop3_enable_starttls=false
$ zmmailboxdctl restart
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment