Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [starttls]

STARTTLS is the SMTP command to connect to email servers securely over TLS (formerly SSL). Use with an email server tag like [postfix], [exchange], etc.

112 questions
0
votes
1 answer

Configuring postfix to use TLS for a particular server?

Running kubuntu 10.04 on my host, let's call it alpha. I've got postfix as my system MTA. I've got crons running on alpha that need to send email to a remote host, let's call it mailhost. I cannot alter any configs on mailhost. Normally I use…
dirtside
  • 1,551
  • 5
  • 17
  • 22
0
votes
0 answers

Is Certificates are required for STARTTLS connection on LDAP

My LDAP server's ldap.conf file # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. BASE dc=coretesting,dc=com URI ldap://ldap.coretesting.com…
ram ajay
  • 11
  • 2
0
votes
1 answer

Unable to start STARTTLS in PowerMTA server

We have PowerMTA v5.5r1 installed on Ubuntu 22.04 server. When I tried to telnet localhost with 25 port I am unable to see 250-STARTTLS option. Please help which parameter or configuration needs to update? In /etc/pmta/config file there are multiple…
Sachin Kadam
  • 1
  • 1
0
votes
0 answers

Why exim does not use TLS when sends email to remote SMTP?

Here what exim does when sends emails to gmail and other SMTP severs Received: from ns01.virtex.kz (ns1.virtex.kz. [185.141.164.16]) by mx.google.com with ESMTP id i11-20020a5d55cb000000b002c54fb628bdsi5544805wrw.640.2023.03.05.01.42.36 …
Falseclock
  • 11
  • 2
0
votes
1 answer

Nginx mail proxy: tls between the proxy and the server?

When using the Nginx Mail Proxy feature to realize an SMTP proxy, there are several options available to configure (start)tls between the client and the proxy. However, it appears between the proxy and the upstream SMTP server, only 'plain' SMTP is…
Arnout Engelen
  • 101
  • 3
0
votes
2 answers

PHP8 ldap_bind : Error -1 Can't contact LDAP server

I m on almalinux 8.7 with PHP8. Test ldapsearch with TLS is ok ldapsearch -H ldap://xxxx -x -ZZ /etc/pki/tls/certs/xxxx.pem -D 'xxxxx' -w 'xxxx' -b 'cn=xxx,cn=users,dc=xxx,dc=xxxx' But ldap_bind won't find ldap server. Error -1. Without…
Alex Lum
  • 145
  • 1
  • 4
  • 16
0
votes
1 answer

sendmail does not issue STARTTLS when acting as a client

I'm having problems relaying to servers that whise mail is routed through mimecast. Connections are being rejected with the message: 553 This route requires encryption (TLS) - https://community.mimecast.com/docs/DOC-1369#553 This makes me think…
Alien Life Form
  • 2,309
  • 2
  • 21
  • 32
0
votes
1 answer

Cannot get Mutt/Gmail/OAuth2 to work - cannot STARTTLS

I'm trying to get Mutt working with Gmail using OAuth2. I'm using Debian 10 and have compiled Mutt 2.2.1 with --enable-smtp. I've created my tokens. My muttrc contains: set smtp_oauth_refresh_command="~/oauth2.py --quiet --user=my_user@gmail.com…
John Percival
  • 1
0
votes
0 answers

tls negotiation failed the certificate doesn't match the host

I'm tryin to setup Gmail send-as to send email via my SMTP server over TLS and I get "tls negotiation failed the certificate doesn't match the host" ever since I renewed my lets encrypt cert. Background: I have a server with a dedicated IP sharing…
eng3
  • 167
  • 10
0
votes
1 answer

does SSL/TLS STARTLS full encrypt connexion for POP and IMAP

I am configuring POP and IMAP accounts in thunderbird mail client. Here are 2 options: Security: None SSL/TLS STARTLS Authentication method: Normal password Encrypted password Kerberos / GSSAPI NTLM OAuth2 I have 2 mails accounts: One POP and…
Bob5421
  • 319
  • 3
  • 8
  • 16
0
votes
1 answer

Are SMTPS and IMAPS ports really deprecated?

I've read that STARTTLS command was added and intended to deprecate the SSL ports. But even major mail servers like google still use SSL ports and even don't allow us to use classic ports with STARTTLS. So it seems situation is quite opposite and…
knight_lightning
  • 33
  • 1
  • 5
0
votes
1 answer

How to read an OpenSSL cipher suite list

hMailserver is an open source Window e-mail server. For incoming e-mail it supports STARTTLS with the help of OpenSSL 1.1.1. It allows configuring the cipher suites, the default…
Jeff
  • 236
  • 2
  • 4
0
votes
0 answers

NSS-LDAP not working over TLS: do_open: do_start_tls failed:stat=-1

I'm using NSS-LDAP for authentication. Without TLS, everything works fine. Once I enable TLS (StartTLS) with a self-signed certificate, which I have added to the client, NSS-LDAP won't connect to the LDAP server. systemctl status…
jacobz
  • 101
  • 2
0
votes
1 answer

Will msmtp fallback to unencrypted connections if encrypted connections fail?

My ~/.msmtprc config file says to connect to a server on port 25 with tls on and tls_starttls on. Is there a risk that, if the encrypted connection setup fails for some reason, then msmtp will fallback to a plaintext connection, possibly divulging…
a3nm
  • 868
  • 6
  • 12
0
votes
0 answers

Apache and TLS mode - password in plain text in wireshark

My apache.config: LDAPTrustedMode TLS LDAPTrustedGlobalCert CERT_BASE64 /etc/pki/tls/certs/ca.cer AllowOverride None Options None #Order allow,deny #Allow from all AuthType Basic AuthName…
overflowed
  • 115
  • 1
  • 5
1 2 3 4 5 6
7
8