Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [starttls]

STARTTLS is the SMTP command to connect to email servers securely over TLS (formerly SSL). Use with an email server tag like [postfix], [exchange], etc.

112 questions
1
vote
1 answer

How can I tell if my LDAP authentications are using StartTLS?

I'm setting up a new OpenLDAP server on Ubuntu 12.04 with a copy of our current LDAP database. I've gotten most of the configuration down, I think, but I'm having trouble telling if the LDAP queries are encrypted or not. I suspect there may be a…
zymhan
  • 1,371
  • 1
  • 17
  • 30
1
vote
2 answers

Postfix Send Error: Must Issue STARTTLS command

Running Ubuntu 12.04 and trying to configure postfix to relay send and receive through GMAIL. Am running into connection issues particularly with TLS. Have tried a bunch of troubleshooting solutions and have changed my main.cf to address TLS but…
Mary Elizabeth
  • 13
  • 1
  • 1
  • 4
1
vote
2 answers

How can I ensure Liferay uses TLS for authentication

Please note, this is about communication between Liferay and the LDAP server, not communication between the user's browser and Liferay I'm asking this here since I got zero views (other than my own) in 30 minutes at the liferay forums, and I'd like…
Gus
  • 127
  • 2
  • 11
1
vote
2 answers

slapd with STARTTLS only doesn't work

I'm using slapd under Debian/Squeeze and trying to configure the system to only allow TLS-encrypted connections using STARTTLS on port 389. So I've configured my /etc/default/slapd to listen on port 389: SLAPD_SERVICES="ldap://:389/" I generated a…
Daniel
  • 11
  • 2
1
vote
2 answers

Handling http and https requests using a single port with lihgttpd

At the moment I am using http and https as different port. And based on request uri, I made a redirection rule from http to https switch and vice versa. But If I can use only a single port for https and https in lighttpd. That will be the best…
agfe2
  • 113
  • 4
1
vote
0 answers

How to (properly) force the use of SSL or STARTTLS in OpenLDAP?

I have successfully managed to configure my OpenLDAP (which is an Apple Open Directory variant, but that should not matter) to work with both, SSL (ldaps on port 636) as well as STARTTLS (on port 389). However, it's still possible for a client to…
not2savvy
  • 206
  • 1
  • 10
1
vote
1 answer

Mail server sending to postfix refusing TLS connection with "certificate expired", but it's not

Since April 30, I'm seeing errors like that in my mail log: May 1 02:27:27 afaron postfix/smtpd[2644268]: connect from r137.info.hofer.at[66.117.17.137] May 1 02:27:27 afaron postfix/smtpd[2644268]: SSL_accept error from…
Tobias Leupold
  • 161
  • 10
1
vote
0 answers

Personal OpenSMTPd relay fails when using "tls-require", works fine with just "tls"

I'm currently setting up a somewhat unique personal email server using OpenSMTPd. I have a local server (Raspberry Pi) and a remote server (VPS). Emails sent to me are sent to the remote server and are then relayed to my local server. When I send an…
Josey
  • 11
  • 2
1
vote
0 answers

Can't configure SMTP encryption - postfix

I have docker-mailserver and Roundcube in containers, beside there is MySQL database for mail data and user passwords. Dovecot inside is configured to verify logging in users passwords with database. Yesterday I've configured IMAP and it is working…
pbies
  • 169
  • 13
1
vote
1 answer

Postfix is getting "TLS Is required, but was not offered by host"

I've searched every forum, every article, every serverfault.com post for this issue. I'm using a fresh setup of Postfix. It is managed by Virtualmin. Whenever I try to send mail via TLS, I get the error (identifable information removed): Sep 7…
Ashley
  • 41
  • 1
  • 6
1
vote
1 answer

Using stunnel as proxy between SSL versions for SMTP with STARTTLS

I have a quite old software which doesn't support TLS 1.2. However SMTP Server only supports TLS 1.2. Now I wanted to use stunnel to connect to SMTP server and and also listening for smtp access. I have already a valid certificate for this server.…
Hannes
  • 307
  • 2
  • 12
1
vote
1 answer

Gmail failing to accept TLS

I recently set up a postfix mail server. Testing it with other domains, everything seems to work well. However, when my server tries to send messages to gmail, they are marked as spam, with the red padlock and note rr.com did not encrypt this…
Onion
  • 21
  • 2
1
vote
1 answer

Deny non TLS incoming mail with postfix and force certificate check

I want to deny non TLS incoming mails on my postfix server. Here is what i've done: smtpd_tls_security_level = encrypt smtpd_tls_auth_only = yes I do not really understand the difference between this 2 lines, but it seems to work. Now, what i want…
Bob5421
  • 319
  • 3
  • 8
  • 16
0
votes
1 answer

TLS from unknown: No client certificate presented

We have setup a windows server virtual SMTP (under IIS6 manager). In the SMTP settings, TLS encryption is enabled, fqdn field is "sharepoint.mycompany.com". In the server's cert store "personal" folder we have the certificate…
Mark
  • 217
  • 3
  • 11
0
votes
1 answer

Ambari sync with LDAP using StartTLS

I'm facing an issue to sync Ambari with a LDAP server using StartTLS and a self-signed certificate. Ambari server and ldap server are both running on the same machine. I've followed the steps written in the doc but I'm not sure if I'm in the LDAPS…
JeremyJJ
  • 1
1 2 3 4
5
6 7 8