Author Topic: The mail-SSL doesn't work  (Read 281 times)

0 Members and 1 Guest are viewing this topic.

Offline
*
The mail-SSL doesn't work
« on: September 15, 2024, 06:22:37 PM »
Hi Guys,

I have a problem sending emails, my configurations are:
https://ibb.co/kXrHPzY

And doesn't work to send emails, I have the SSL activated and I get those errors:
Code: [Select]
Sep 15 20:05:26 vmi1911643 postfix/smtpd[22674]: connect from vmi1911643.contaboserver.net[86.48.7.222]
Sep 15 20:05:26 vmi1911643 postfix/smtpd[22674]: warning: TLS SNI from vmi1911643.contaboserver.net[86.48.7.222] is invalid: 86.48.7.222
Sep 15 20:05:26 vmi1911643 postfix/smtpd[22674]: SSL_accept error from vmi1911643.contaboserver.net[86.48.7.222]: -1
Sep 15 20:05:26 vmi1911643 postfix/smtpd[22674]: warning: TLS library problem: error:0A000418:SSL routines::tlsv1 alert unknown ca:ssl/record/rec_layer_s3.c:1600:SSL alert number 48:
Sep 15 20:05:26 vmi1911643 postfix/smtpd[22674]: lost connection after STARTTLS from vmi1911643.contaboserver.net[86.48.7.222]
Sep 15 20:05:26 vmi1911643 postfix/smtpd[22674]: disconnect from vmi1911643.contaboserver.net[86.48.7.222] ehlo=1 starttls=0/1 commands=1/2
Sep 15 20:08:47 vmi1911643 postfix/anvil[22676]: statistics: max connection rate 1/60s for (submission:86.48.7.222) at Sep 15 20:05:26
Sep 15 20:08:47 vmi1911643 postfix/anvil[22676]: statistics: max connection count 1 for (submission:86.48.7.222) at Sep 15 20:05:26
Sep 15 20:08:47 vmi1911643 postfix/anvil[22676]: statistics: max cache size 1 at Sep 15 20:05:26
Sep 15 20:13:24 vmi1911643 postfix/smtpd[24953]: connect from vmi1911643.contaboserver.net[86.48.7.222]
Sep 15 20:13:24 vmi1911643 postfix/smtpd[24953]: warning: TLS SNI from vmi1911643.contaboserver.net[86.48.7.222] is invalid: 86.48.7.222
Sep 15 20:13:24 vmi1911643 postfix/smtpd[24953]: SSL_accept error from vmi1911643.contaboserver.net[86.48.7.222]: -1
Sep 15 20:13:24 vmi1911643 postfix/smtpd[24953]: warning: TLS library problem: error:0A000418:SSL routines::tlsv1 alert unknown ca:ssl/record/rec_layer_s3.c:1600:SSL alert number 48:
Sep 15 20:13:24 vmi1911643 postfix/smtpd[24953]: lost connection after STARTTLS from vmi1911643.contaboserver.net[86.48.7.222]
Sep 15 20:13:24 vmi1911643 postfix/smtpd[24953]: disconnect from vmi1911643.contaboserver.net[86.48.7.222] ehlo=1 starttls=0/1 commands=1/2

I really don't know how to solve, I read some topics from different forums but nothing work...
I have those settings for other websites that I have and work very well, like the default stuff from Cpanel...but for this script doesn't work at all.
Please heeeelp
Thank you!
« Last Edit: September 15, 2024, 06:27:01 PM by Insan3Us »

Offline
**
Re: The mail-SSL doesn't work
« Reply #1 on: September 15, 2024, 06:29:25 PM »
You use port 587 (unsecure SMTP). So you need to disable "SSL" support in your mail application. The mail session will be secured automatically after the command "STARTTLS" (see logs).

In case you want to explicit TLS session. Then you need to use the port 465.

Offline
*
Re: The mail-SSL doesn't work
« Reply #2 on: September 15, 2024, 06:59:20 PM »
You use port 587 (unsecure SMTP). So you need to disable "SSL" support in your mail application. The mail session will be secured automatically after the command "STARTTLS" (see logs).

In case you want to explicit TLS session. Then you need to use the port 465.

If I use 465 I get this eror:
Code: [Select]
Sep 15 20:54:13 vmi1911643 postfix/pickup[162519]: 5AACBA401FE: uid=0 from=<root>
Sep 15 20:54:13 vmi1911643 postfix/cleanup[168525]: 5AACBA401FE: message-id=<20240915185413.5AACBA401FE@vmi1911643.contaboserver.net>
Sep 15 20:54:13 vmi1911643 postfix/qmgr[10331]: 5AACBA401FE: from=<root@vmi1911643.contaboserver.net>, size=733, nrcpt=1 (queue active)
Sep 15 20:54:13 vmi1911643 postfix/local[168534]: 5AACBA401FE: to=<root@vmi1911643.contaboserver.net>, orig_to=<root>, relay=local, delay=0.24, delays=0.2/0.03/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
Sep 15 20:54:13 vmi1911643 postfix/qmgr[10331]: 5AACBA401FE: removed
And the message is not sent.

Can you tell me how I remove the SSL for mail?
If I come here, and press apply will not remove, doesn't work: https://ibb.co/JyVPvxj

Offline
**
Re: The mail-SSL doesn't work
« Reply #3 on: September 15, 2024, 07:21:08 PM »
According to the provided log records there are no errors. The log records say the message from "
Code: [Select]
root@vmi1911643.contaboserver.net" was accepted and delivered to "
Code: [Select]
root@vmi1911643.contaboserver.net".

Your previous screeshot indicates you sends emails from the email address like "
Code: [Select]
noreply@...."

Send one more email using your application/script and then check logs again to be sure you check the correct mail records.

Offline
*
Re: The mail-SSL doesn't work
« Reply #4 on: September 15, 2024, 07:36:37 PM »
According to the provided log records there are no errors. The log records say the message from "
Code: [Select]
root@vmi1911643.contaboserver.net" was accepted and delivered to "
Code: [Select]
root@vmi1911643.contaboserver.net".

Your previous screeshot indicates you sends emails from the email address like "
Code: [Select]
noreply@...."

Send one more email using your application/script and then check logs again to be sure you check the correct mail records.

vmi1911643.contaboserver.net in this case is the hostname...I didn't changed it. Is the default one from my hosting provider...
the last logo show the settings with TLS that you gave me with port 465..
I want to use SSL, with port 587 but I don't know how to remove the SSL from mail as you told me to do as a solution.

Offline
**
Re: The mail-SSL doesn't work
« Reply #5 on: September 15, 2024, 10:02:03 PM »
I want to use SSL, with port 587.
1. Port 587: Short answer - STARTTLS. Read this:
https://en.wikipedia.org/wiki/Opportunistic_TLS

2. If you want to initiate SSL/TLS session explicitly then you need to use port 465.

3. If you want to do it over the port 587 then you have to reconfigure the mail server but it won't be the correct way.

CWP configures mail server correctly and provides correct mail settings in the user level control panel (see "Email accounts --> Email accounts")