I use successfully what Francis describes for more than one year now :

RequestHeader set "x-webobjects-server-port" "443"
RequestHeader set "x-webobjects-server-name" "mail.whatever.com"
RequestHeader set "x-webobjects-server-url" "https://mail.whatever.com";

Please, note that ActiveSync will not work with self-generated certs.

Julien PAQUIT // +33 (0)7 82 455 855
DATABEILLE, Votre Architecte de Données
www.databeille.com

Le 25/05/2016 14:19, Francis Lachapelle ([email protected]) a écrit :
Hi Chris

On May 24, 2016, at 3:31 PM, Chris Burke ([email protected]) <[email protected]> 
wrote:

I'm having a problem getting SSL to work with SOGo web access and ActiveSync.


In Apache I redirect everything to SSL in 000-default.conf:

<VirtualHost *:80>
ServerName mail.mydomain.com
Redirect permanent / https://mail.mydomain.com/
</VirtualHost>

This works great for everything, except when accessing SOGo.

When I go to https://[mail.mydomain.com]/SOGo the  login page loads https correctly, but 
as soon as I click "connect", I get redirected to http and the page doesn't 
load properly because of mixed http and https calls.

After getting redirected to http I can I can force "https:" in the URL bar, 
then it will load correctly.

I think the problem may be the http ProxyPass statements in the Apache 
SOGo.conf file:

ProxyPass /Microsoft-Server-ActiveSync \
  http://127.0.0.1:20000/SOGo/Microsoft-Server-ActiveSync \
  retry=60 connectiontimeout=5 timeout=3540

ProxyPass /SOGo http://127.0.0.1:20000/SOGo retry=0

I have tried changing these ProxyPass statements to https (and turning on 
SSLProxyEngine).
This failed.
I have also changed 127.0.0.1 to mail.mydomain.com (which resolves locally to 127.0.0.1) 
and this still fails with "internal server error".

Any ideas how I can stop SOGo from redirecting to http?

Also is there a way to force ActiveSync to use SSL?
You must set the x-webobjects headers. See the documentation:

http://sogo.nu/files/docs/SOGoInstallationGuide.html#_apache_configuration


Francis

--
[email protected]
https://inverse.ca/sogo/lists

Reply via email to