Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

SSL Addressbook-Service suddenly stopped working (OSX 10.7.5 Server)

Hi,

i'm having problems with my Addressbook-Server. It suddenly stopped working with SSL. It work flawlessly for years and suddenly i can't reach it over SSL.

In the Browser I can reach the server with http://my.domain.at:8008/addressbooks/users/Lukas/ without a problem but as soon as i try it with the SSL URL https://my.domain.at:8443/addressbooks/users/Lukas/ it doesn't respond. T

he Calendar-Service works with and without SSL.

There are a few Konsol Messages

When trying to add an account.

05.10.15 09:02:30,831 accountsd[1031]: [CardDAVPlugin-ERROR] No 'AddlInfoKey' present to save: {

}

(CoreDAVHTTPStatusErrorDomain-Fehler 405.)

When an account it added via a profile. The 503 message commes every 30 seconds.

05.10.15 08:50:35,061 Contacts[715]: [CardDAVPlugin-ERROR] -getHomeInfo:[_controller containersAtURLs:{(

https://lukas@my.domain.at/addressbooks/__uids__/C098C3CC-6135-4E07-85F5-0693D35 074DD///lukas@my.domain.at/addressbooks/__uids__/C098C3CC-6135-4E07-85F5-0693D35074DD/

)}] Error Domain=CoreDAVHTTPStatusErrorDomain Code=405 "(null)" UserInfo={CoreDAVHTTPHeaders=<CFBasicHash 0x7fedfbc1fca0 [0x7fff7a86d890]>{type = immutable dict, count = 7,

entries =>

0 : Server = <CFString 0x7fedf9c4e570 [0x7fff7a86d890]>{contents = "Apache/2.2.26 (Unix) PHP/5.3.28 with Suhosin-Patch mod_ssl/2.2.26 OpenSSL/0.9.8za DAV/2"}

1 : Content-Type = <CFString 0x7fedf9c81210 [0x7fff7a86d890]>{contents = "text/html; charset=iso-8859-1"}

2 : Allow = <CFString 0x7fedf9c8a120 [0x7fff7a86d890]>{contents = "GET,HEAD,POST,OPTIONS"}

6 : Date = <CFString 0x7fedf9c96750 [0x7fff7a86d890]>{contents = "Mon, 05 Oct 2015 06:50:35 GMT"}

10 : Keep-Alive = <CFString 0x7fedf9cc4ab0 [0x7fff7a86d890]>{contents = "timeout=15, max=100"}

11 : Content-Length = 433

12 : Connection = <CFString 0x7fff7a811190 [0x7fff7a86d890]>{contents = "Keep-Alive"}

}

}

05.10.15 08:49:52,115 AddressBookSourceSync[933]: [CardDAVPlugin-ERROR] -getPrincipalInfo:[_controller supportsRequestCompressionAtURL:https://lukas@my.domain.at/principals/__uids__/C098C3CC-6135-4E07-85F5-0693D3507 4DD///lukas@my.domain.at/principals/__uids__/C098C3CC-6135-4E07-85F5-0693D35074DD/] Error Domain=CoreDAVHTTPStatusErrorDomain Code=503 "(null)" UserInfo={CoreDAVHTTPHeaders=<CFBasicHash 0x7f8f9b714270 [0x7fff7a86d890]>{type = immutable dict, count = 4,

entries =>

3 : Content-Length = 471

4 : Connection = close

5 : Content-Type = <CFString 0x7f8f9b55f6b0 [0x7fff7a86d890]>{contents = "text/html; charset=iso-8859-1"}

6 : Date = <CFString 0x7f8f9b5356f0 [0x7fff7a86d890]>{contents = "Mon, 05 Oct 2015 06:49:52 GMT"}

}

Since it gets 405 and 503 error messages it cant get to the server so there are no error messages on the server.

It is really strange that the calendar service is working and the contact service not via ssl.

Where should i look first. I haven't toughed any config files. Should i post any?

Thanks for for the support in advance

Posted on Oct 5, 2015 12:53 AM

20 replies

mossm

Level 1

0 points

Nov 23, 2015 3:56 PM in response to MacPro_de

I have 10.7.5 server with a 2012 version of Darwin calendar server. I just changed SSLv3_METHOD to TLSv1_METHOD in CalendarServer/twistedcaldav/stdconfig.py AND renamed stdconfig.pyc to get it to recompile, then stopped and started caldav and voila! (vive la France!) My El Capitan machines' calendar and contacts apps now work (and Safari https link (and latest Firefox after accepting risk).) Thanks so much. Thought my old mac mini server with Darwin caldav was a goner.

schwabe

Level 1

0 points

Jan 13, 2016 10:36 AM in response to MacPro_de

Hello,

we are a small firm and cannot exchange hardware and software so often, that's why we have somehow a variety of apple computers and OS X.

Does this patch in the OS 10.6.8. server then also work for other clients that are still on 10.6.8, so to say for a mixed client environment running different OS Xs? Or must be then all clients using OS 10.11.?

We have a 10.6.8 server (mac mini) and clients on 10.6.8 (2007 mac book pro), 10.7.5 (2007 mac pro, 10.10 (mac pro 5,1) and recently 10.11. (macbook retina)

Some of then we just cannot upgrade to the lastet OS X, because of hardware issues.

I ask this, because in case of upgrading the mac server from 10.6.8 to server 10.11., does anybody has experience, if

older OS X clients on 10.6.8 still then can access services (AFP, ical and adressbook) on this server 10.11.?

Christian

Jan 13, 2016 11:12 AM in response to schwabe

I just tested it on the Mac OS X Server 10.6.8 itself and the addressbook application accesses the addressbook server with enabled SSL (TLS, of course) without a problem.

I would expect, that later OS X versions will also work.

May 3, 2016 7:01 AM in response to MacPro_de

Thank for you input, JF!

I have a 10.7.5 Lion server I maintain, and all El Capitan Calendars could not login. In Lion, I could only find the two files Luke changed, twistedcaldav/stdconfig.py and twext/internet/ssl.py. There is only a plugins folder in the twisted directory.

This is what I did. Turned off iCal Service. Changed the four instances of SSLv3_METHOD to TLSv1_METHOD (2 in each file). Relaunched iCal service. Now nobody could login, neither 10.11 or 10.10 through 10.7 Calendar/iCal clients. So I turned of iCal Service again, changed them back to SSLv3_METHOD, relaunched iCal service. Still no luck! Nothing was working. Then I restarted and everything started working, both 10.11.x calendars all the way down to 10.7.x iCals. I'm at a loss as to why this happened, but I'm guessing something re-compiled or got updated in the PostgreSQL database.

It is all working now!

May 3, 2016 9:11 AM in response to James Knight

Thank you for your feedback.

I think, that you should check, if there is now TLSv1 or SSLv3 or SSLv23 set in your python source files.

It should be TLSv1_METHOD. If you still find the older SSLv3_METHOD or SSLv23_METHOD, then you could run into trouble after the next reboot of your server machine.

Also please check the post from mossm, which provides additional information in regard to force the system to recompile the python files (renaming the .pyc files).

Re: SSL Addressbook-Service suddenly stopped working (OSX 10.7.5 Server)

BTW: Meanwhile I upgraded our server from Mac OS X 10.6.8 Server to OS X 10.11.4 and OS X Server 5.1. I wouldn't call it hassle-free, but in regard to Adressbook and Calendar Server the upgrade was quite easy. If you have a computer, that can be used with OS X Versions later than 10.7.5, then you should consider to do this.

SSL Addressbook-Service suddenly stopped working (OSX 10.7.5 Server)