I am trying to add an IMAP web hook following provided online instructions and I am bumping into an SSL error (see hereunder). 

We have local SSL cert and I don't know where I can add the CA cert for the conexion to be accepted. 

Any info would be very appreciated. 

There are also two erros for "OPENPROJECT_ATTACHMENTS_STORAGE_PATH" and "OPENPROJECT_RAILS_CACHE_STORE"… If someone knows how to properly fix this… most welcome. 

root@OpenProject:/home/gregober# openproject run bundle exec rake --trace redmine:email:receive_imap host=‘dynmail.xxxx.lan' username=’support@xxx.com' password='the_pass' port=143 ssl=true allow_override=type,project project=Support
/opt/openproject/config/constants/settings/definition.rb:303:in `find_env_var_override': Using unprefixed environment variables is deprecated. Please use OPENPROJECT_ATTACHMENTS_STORAGE_PATH instead of ATTACHMENTS_STORAGE_PATH (StructuredWarnings::StandardWarning)
/opt/openproject/config/constants/settings/definition.rb:303:in `find_env_var_override': Using unprefixed environment variables is deprecated. Please use OPENPROJECT_RAILS_CACHE_STORE instead of RAILS_CACHE_STORE (StructuredWarnings::StandardWarning)
** Invoke redmine:email:receive_imap (first_time)
** Invoke environment (first_time)
** Execute environment
** Execute redmine:email:receive_imap
rake aborted!
OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 peeraddr=192.168.xx.yyy:993 state=error: certificate verify failed (Hostname mismatch)
/opt/openproject/vendor/bundle/ruby/3.1.0/gems/net-protocol-0.1.3/lib/net/protocol.rb:46:in `connect_nonblock'
/opt/openproject/vendor/bundle/ruby/3.1.0/gems/net-protocol-0.1.3/lib/net/protocol.rb:46:in `ssl_socket_connect'
/opt/openproject/vendor/bundle/ruby/3.1.0/gems/net-imap-0.2.3/lib/net/imap.rb:1452:in `start_tls_session'
/opt/openproject/vendor/bundle/ruby/3.1.0/gems/net-imap-0.2.3/lib/net/imap.rb:1107:in `initialize'
/opt/openproject/lib/redmine/imap.rb:52:in `new'
/opt/openproject/lib/redmine/imap.rb:52:in `connect_imap'
/opt/openproject/lib/redmine/imap.rb:36:in `check'
/opt/openproject/lib/tasks/email.rake:152:in `block (3 levels) in <top (required)>'
/opt/openproject/vendor/bundle/ruby/3.1.0/gems/rake-13.0.6/lib/rake/task.rb:281:in `block in execute'
/opt/openproject/vendor/bundle/ruby/3.1.0/gems/rake-13.0.6/lib/rake/task.rb:281:in `each'
/opt/openproject/vendor/bundle/ruby/3.1.0/gems/rake-13.0.6/lib/rake/task.rb:281:in `execute'
/opt/openproject/vendor/bundle/ruby/3.1.0/gems/sentry-ruby-5.4.2/lib/sentry/rake.rb:24:in `execute'
/opt/openproject/vendor/bundle/ruby/3.1.0/gems/rake-13.0.6/lib/rake/task.rb:219:in `block in invoke_with_call_chain'
/opt/openproject/vendor/bundle/ruby/3.1.0/gems/rake-13.0.6/lib/rake/task.rb:199:in `synchronize'

Hi,

as you did not write about your environment I will just share an idea:

1. You need to trust the CA of your IMAP server?
2. Your App (OpenProject) Server does not trust the CA yet?
3. There is no place where to add the custom CA?

-> Please add the CA trust into the Operating System of the App Server...

e.g. Ununtu/Debian https://www.techrepublic.com/article/how-to-install-ca-certificates-in-ubuntu-server/

e.g. CentOS/RedHat https://www.systranbox.com/how-to-install-ca-certificate-in-linux-centos/

I hope it will help to solve your riddle

Kind regards, Adam