Email Notifications fail with SSL/TLS

[jawaid]

I have just moved my email hosting to another provider, and setup the relevant settings, but when I try to send a test email, using port 465 it fails with handshake error.

I have used the exact same settings, on my email client and am able to send emails fine. I think the issue might be the Root CA. 

Any advise please? 

I have 

[Support]

On 1/9/2022 at 7:03 AM, jawaid said:

I think the issue might be the Root CA. 

If that is the case, please reset the certificates and also try to generate new LE certs for the domains that have expired certs on them. And recreate the cert by turning off and on of the ACME Let's encrypt (LE) setting.

[jawaid]

I have already reset the certificates. The domain certificates have recently been renewed within Vodia and are due to expire in April 2022.

[Vodia PBX]

So the problem is on TLS level? You don't see anything useful when you turn the email logging on? Are they automatically detecting TLS or do you need to use Start TLS to switch?

[jawaid]

The email logging either gives a handshake error staight off, or at the end, when it seems that the message has been sent to the email server.

This is on a multi-tenant system which is on v67.0.5, there weren't any changes done with regards to TLS, between this version and the latest stable version available (v68.0.4)?

I haven't updated the tenant system yet, as some changes were done on v68.0.7-beta that I need, so just waiting for a stable v68.0.7 or later to be made available.

 

[Vodia PBX]

Email-wise top of my head there should be no changes between 67 and 68, at least nothing major. Anyhow, IMHO if you turn logging for TLS and EMAIL on to level 9 and hit the test button for email, it should become obvious what the problem is. 

[jawaid]

This is from the log file:

The settings are identical to the ones on v68.0.7.beta, that works fine, but on this version (67.0.5) get the Alert Fatal messasge and no email delivered.

[Vodia PBX]

Seems that it breaks with the STARTTLS. That means the switch from plain text to TLS fails. You could try to use TLS right from the beginning (avoid STARTTLS), maybe you'll have go to an encrypted port. In that case I would turn the TLS log level also to 9 and see what messages are being send and received.

[jawaid]

That means that the issue has been fixed in v68.x as on my test v68.0.7.beta it all works fine, and the settings are exactly the same. Just waiting for a stable release of v68.0.7 or later, before upgrading the customer system. Do you know how long it will be before the release? 

[Vodia PBX]

68.0.8 should be available next Wednesday.

[jawaid]

That's great. Thanks I shall upgrade my test system to that and check everything.