Perl SSL error is keeping me from loving OTRS

I feel as if I have finally found the root cause of all my issues. I found this in the PerlEX log: Can someone tell me how to force Perl to not require SSL or configure OTRS to use it? I would much rather NOT use it, but finding the "off" switch in Perl has proven troublesome. As always, any assistance you can provide is very appreciated. *** 'C:\otrs\OTRS\bin\cgi-bin\index.plhttp://index.pl' log message at: 2013/08/21 07:10:26 [Wed Aug 21 07:09:37 2013] -e: ******************************************************************* [Wed Aug 21 07:09:37 2013] -e: Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client [Wed Aug 21 07:09:37 2013] -e: is deprecated! Please set SSL_verify_mode to SSL_VERIFY_PEER [Wed Aug 21 07:09:37 2013] -e: together with SSL_ca_file|SSL_ca_path for verification. [Wed Aug 21 07:09:37 2013] -e: If you really don't want to verify the certificate and keep the [Wed Aug 21 07:09:37 2013] -e: connection open to Man-In-The-Middle attacks please set [Wed Aug 21 07:09:37 2013] -e: SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application. [Wed Aug 21 07:09:37 2013] -e: ******************************************************************* Jose Salviati [cid:image001.jpg@01CE9E56.E9A69E70] sip:Jose.Salviati@Accenture.com Technology Consulting | Workplace Technology & Collaboration Direct Dial: (310) 726-2835 Mobile: (949) 829-1028 Email: Jose.Salviati@Accenture.commailto:Jose.Salviati@Accenture.com ________________________________ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. ______________________________________________________________________________________ www.accenture.com

https://www.google.com/search?q=Using+the+default+of+SSL_verify_mode+of+SSL_...
Summary: Something not displayed here is using SSL connection. Likely
suspects: IMAPS, POP3S
On Wed, Aug 21, 2013 at 1:12 PM,
I feel as if I have finally found the root cause of all my issues. I found this in the PerlEX log: Can someone tell me how to force Perl to not require SSL or configure OTRS to use it? I would much rather NOT use it, but finding the “off” switch in Perl has proven troublesome. As always, any assistance you can provide is very appreciated.****
** **
*** 'C:\otrs\OTRS\bin\cgi-bin\index.pl' log message at: 2013/08/21 07:10:26****
[Wed Aug 21 07:09:37 2013] -e: ***********************************************************************
[Wed Aug 21 07:09:37 2013] -e: Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client****
[Wed Aug 21 07:09:37 2013] -e: is deprecated! Please set SSL_verify_mode to SSL_VERIFY_PEER****
[Wed Aug 21 07:09:37 2013] -e: together with SSL_ca_file|SSL_ca_path for verification.****
[Wed Aug 21 07:09:37 2013] -e: If you really don't want to verify the certificate and keep the****
[Wed Aug 21 07:09:37 2013] -e: connection open to Man-In-The-Middle attacks please set****
[Wed Aug 21 07:09:37 2013] -e: SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.****
[Wed Aug 21 07:09:37 2013] -e: ***********************************************************************
** **
** **
*Jose Salviati *[image: Lync-Icon]**
*Technology Consulting | Workplace Technology & Collaboration***
Direct Dial: (310) 726-2835****
Mobile: (949) 829-1028****
Email: Jose.Salviati@Accenture.com****
** **
------------------------------ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited.
Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy.
______________________________________________________________________________________
www.accenture.com
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

That's got to be it! We are using Office365 for email which certainly would require SSL. So, I can shut off email and get OTRS to work, but I guess the bigger question then is what steps do I need to take to get email to work when SSL is required by IMAPS?
Gerald - thank you for your help. I have been fighting this for almost a month and it feels GREAT to finally find the root cause!
Jose
From: otrs-bounces@otrs.org [mailto:otrs-bounces@otrs.org] On Behalf Of Gerald Young
Sent: Wednesday, August 21, 2013 10:23 AM
To: User questions and discussions about OTRS.
Subject: Re: [otrs] Perl SSL error is keeping me from loving OTRS
https://www.google.com/search?q=Using+the+default+of+SSL_verify_mode+of+SSL_...
Summary: Something not displayed here is using SSL connection. Likely suspects: IMAPS, POP3S
On Wed, Aug 21, 2013 at 1:12 PM,

If you're willing to take a look at an alternative option that will make
tickets immediately instead of polling ...
http://forums.otterhub.org/viewtopic.php?f=60&t=20319
Summary: the email gets forwarded to your OTRS SMTP server and runs the
processing script. It may sound daunting, but immediate ticket creation is
worth it.
On Wed, Aug 21, 2013 at 2:35 PM,
That’s got to be it! We are using Office365 for email which certainly would require SSL. So, I can shut off email and get OTRS to work, but I guess the bigger question then is what steps do I need to take to get email to work when SSL is required by IMAPS?****
** **
Gerald – thank you for your help. I have been fighting this for almost a month and it feels GREAT to finally find the root cause!****
** **
Jose****
** **
*From:* otrs-bounces@otrs.org [mailto:otrs-bounces@otrs.org] *On Behalf Of *Gerald Young *Sent:* Wednesday, August 21, 2013 10:23 AM *To:* User questions and discussions about OTRS. *Subject:* Re: [otrs] Perl SSL error is keeping me from loving OTRS****
** **
https://www.google.com/search?q=Using+the+default+of+SSL_verify_mode+of+SSL_... ****
** **
Summary: Something not displayed here is using SSL connection. Likely suspects: IMAPS, POP3S****
** **
On Wed, Aug 21, 2013 at 1:12 PM,
wrote:**** I feel as if I have finally found the root cause of all my issues. I found this in the PerlEX log: Can someone tell me how to force Perl to not require SSL or configure OTRS to use it? I would much rather NOT use it, but finding the “off” switch in Perl has proven troublesome. As always, any assistance you can provide is very appreciated.****
****
*** 'C:\otrs\OTRS\bin\cgi-bin\index.pl' log message at: 2013/08/21 07:10:26****
[Wed Aug 21 07:09:37 2013] -e: ***********************************************************************
[Wed Aug 21 07:09:37 2013] -e: Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client****
[Wed Aug 21 07:09:37 2013] -e: is deprecated! Please set SSL_verify_mode to SSL_VERIFY_PEER****
[Wed Aug 21 07:09:37 2013] -e: together with SSL_ca_file|SSL_ca_path for verification.****
[Wed Aug 21 07:09:37 2013] -e: If you really don't want to verify the certificate and keep the****
[Wed Aug 21 07:09:37 2013] -e: connection open to Man-In-The-Middle attacks please set****
[Wed Aug 21 07:09:37 2013] -e: SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.****
[Wed Aug 21 07:09:37 2013] -e: ***********************************************************************
****
****
*Jose Salviati *[image: Lync-Icon]****
*Technology Consulting | Workplace Technology & Collaboration*****
Direct Dial: (310) 726-2835****
Mobile: (949) 829-1028****
Email: Jose.Salviati@Accenture.com****
****
** ** ------------------------------
This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited.
Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy.
______________________________________________________________________________________
www.accenture.com****
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs****
** **
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

This is great Gerald. I am going to just shut down notifications for now and move forward configuring OTRS. I am going to hold on to this option in the event we want email notification and email ticket creation. I think this is a bit simpler than fighting Office365. Thank you again for the support!
From: otrs-bounces@otrs.org [mailto:otrs-bounces@otrs.org] On Behalf Of Gerald Young
Sent: Wednesday, August 21, 2013 12:25 PM
To: User questions and discussions about OTRS.
Subject: Re: [otrs] Perl SSL error is keeping me from loving OTRS
If you're willing to take a look at an alternative option that will make tickets immediately instead of polling ... http://forums.otterhub.org/viewtopic.php?f=60&t=20319
Summary: the email gets forwarded to your OTRS SMTP server and runs the processing script. It may sound daunting, but immediate ticket creation is worth it.
On Wed, Aug 21, 2013 at 2:35 PM,

On 21.08.2013 20:35, jose.salviati@accenture.com wrote:
That's got to be it! We are using Office365 for email which certainly would require SSL. So, I can shut off email and get OTRS to work, but I guess the bigger question then is what steps do I need to take to get email to work when SSL is required by IMAPS?
This is from the current sources: # connect to host my $IMAPObject = Net::IMAP::Simple->new( $Param{Host}, timeout => $Param{Timeout}, debug => $Param{Debug}, use_ssl => 1, ssl_options => [ SSL_verify_mode => IO::Socket::SSL::SSL_VERIFY_NONE(), ], ); The "ssl_options" are the important part... Please check your OTRS sources. - Renée -- Perl / OTRS development: http://perl-services.de OTRS AddOn repository: http://opar.perl-services.de

Please note that this is just a WARNING. It's not an error - apart from
filling up your log file it does not hurt.
You'd only see this error message if you have a new enough IO::Socket::SSL
installed.
Also, in upcoming OTRS 3.3.x we've made changes to how we handle SSL
connections so you won't see this warning message anymore.
Michiel Beijen
Senior Developer
OTRS BV
Schipholweg 103
2316 XC Leiden
The Netherlands
T: +31 71 8200 255
I: http://www.otrs.com
OTRS 3.2 - More than a Help Desk System – Process and Customer Management –
Be an early bird with our special offer - http://j.mp/11TFPSr
On Wed, Aug 21, 2013 at 7:12 PM,
I feel as if I have finally found the root cause of all my issues. I found this in the PerlEX log: Can someone tell me how to force Perl to not require SSL or configure OTRS to use it? I would much rather NOT use it, but finding the “off” switch in Perl has proven troublesome. As always, any assistance you can provide is very appreciated.****
** **
*** 'C:\otrs\OTRS\bin\cgi-bin\index.pl' log message at: 2013/08/21 07:10:26****
[Wed Aug 21 07:09:37 2013] -e: ***********************************************************************
[Wed Aug 21 07:09:37 2013] -e: Using the default of SSL_verify_mode of SSL_VERIFY_NONE for client****
[Wed Aug 21 07:09:37 2013] -e: is deprecated! Please set SSL_verify_mode to SSL_VERIFY_PEER****
[Wed Aug 21 07:09:37 2013] -e: together with SSL_ca_file|SSL_ca_path for verification.****
[Wed Aug 21 07:09:37 2013] -e: If you really don't want to verify the certificate and keep the****
[Wed Aug 21 07:09:37 2013] -e: connection open to Man-In-The-Middle attacks please set****
[Wed Aug 21 07:09:37 2013] -e: SSL_verify_mode explicitly to SSL_VERIFY_NONE in your application.****
[Wed Aug 21 07:09:37 2013] -e: ***********************************************************************
** **
** **
*Jose Salviati *[image: Lync-Icon]**
*Technology Consulting | Workplace Technology & Collaboration***
Direct Dial: (310) 726-2835****
Mobile: (949) 829-1028****
Email: Jose.Salviati@Accenture.com****
** **
------------------------------ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited.
Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy.
______________________________________________________________________________________
www.accenture.com
--------------------------------------------------------------------- OTRS mailing list: otrs - Webpage: http://otrs.org/ Archive: http://lists.otrs.org/pipermail/otrs To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs

Thanks very much for the reply Michiel! It’s possible this error is not related to my issue, but anytime I enter my email information (using Office365) I get this logged error and no emails. Additionally, I get a consistent application error anytime I try to enter data making OTRS un-usable. I am now working without email but would certainly prefer to have it operating! The error I get within OTRS any time I add my email server is “Script failed to send data”.
From: otrs-bounces@otrs.org [mailto:otrs-bounces@otrs.org] On Behalf Of Michiel Beijen
Sent: Sunday, August 25, 2013 11:31 AM
To: User questions and discussions about OTRS.
Subject: Re: [otrs] Perl SSL error is keeping me from loving OTRS
Please note that this is just a WARNING. It's not an error - apart from filling up your log file it does not hurt.
You'd only see this error message if you have a new enough IO::Socket::SSL installed.
Also, in upcoming OTRS 3.3.x we've made changes to how we handle SSL connections so you won't see this warning message anymore.
Michiel Beijen
Senior Developer
OTRS BV
Schipholweg 103
2316 XC Leiden
The Netherlands
T: +31 71 8200 255
I: http://www.otrs.com
OTRS 3.2 - More than a Help Desk System – Process and Customer Management – Be an early bird with our special offer - http://j.mp/11TFPSr
On Wed, Aug 21, 2013 at 7:12 PM,
participants (4)
-
Gerald Young
-
jose.salviati@accenture.com
-
Michiel Beijen
-
Renee B