SMTP over TLS Failed

[Humberto Blanco Castillo]

My dspace server was working with the following configuration

mail.server = outlook.office365.com

mail.server.username = myu...@mydomain.com

mail.server.password = mypassword

mail.server.port = 587

mail.from.address = myu...@mydomain.com

mail.feedback.recipient = ${mail.from.address}

mail.admin = ${mail.from.address}

mail.alert.recipient = ${mail.from.address}

mail.registration.notify = ${mail.from.address}

mail.extraproperties =  mail.smtp.starttls.enable=true, \

                        mail.smtp.socketFactory.port=587, \

                        mail.smtp.socketFactory.fallback=false

But a few days ago it stopped working,:

About to send test email:

 - To: myu...@mydomain.com

 - Subject: DSpace test email

 - Server: outlook.office365.com

Error sending email:

 - Error: javax.mail.SendFailedException: Send failure (javax.mail.MessagingException: Could not convert socket to TLS (javax.net.ssl.SSLHandshakeException: No appropriate protocol (protocol is disabled or cipher suites are inappropriate)))

the only modification its that now we are working with openjdk

openjdk version "1.8.0_272"

OpenJDK Runtime Environment (build 1.8.0_272-b10)

OpenJDK 64-Bit Server VM (build 25.272-b10, mixed mode)

Any knows why of this error, or giveme any ligtha about this?

really appreciate your help

Humberto,

[Jose Blanco]

Humberto,

I'm not sure, but from googling around I see that "You may get this error when you are trying to send an e-mail using gmail server in java."

Try making this change:

mail.extraproperties =  mail.smtp.starttls.enable=true, \

                        mail.smtp.socketFactory.port=587, \

                        mail.smtp.socketFactory.fallback=false, \

                        mail.smtp.ssl.trust=smtp.gmail.com

I saw this suggestion here:  http://javainfinite.com/error-and-solution/javax-mail-messagingexception-could-not-convert-socket-to-tls/

Maybe it's not the gmail server but the mail server you are using,  so smtp.gmail.com might need to be outlook.office365.com.

This is really just a guess.

Hope it helps.

-Jose

--
All messages to this mailing list should adhere to the DuraSpace Code of Conduct: https://duraspace.org/about/policies/code-of-conduct/
---
You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dspace-tech...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/f92ecb2e-d98d-4535-944a-d7b7e1eba897n%40googlegroups.com.

[Cameron, Jacob]

Hello Humberto,

 

Microsoft has ended TLS 1.0 and TLS 1.2 support for all their mail products.  You need to ensure you are using TLS 1.2 or higher on your server or the messages will fail.

 

 

--

Jake Cameron, BCS(UNB)

Systems Support Specialist III

Information Systems and Technical Services University of Lethbridge Library

Phone:(403)329-2756

This e-mail, including any and all attachments, is only for the use of the intended recipient(s) and may contain information that is confidential or privileged. If you are not the intended recipient, you are advised that any dissemination, copying or other use of this e-mail is prohibited. Please notify the sender of the error in communication by return e-mail and destroy all copies of this e-mail. Thank you.

 

From: dspac...@googlegroups.com <dspac...@googlegroups.com> On Behalf Of Humberto Blanco Castillo
Sent: Tuesday, December 8, 2020 8:26 AM
To: DSpace Technical Support <dspac...@googlegroups.com>
Subject: [dspace-tech] SMTP over TLS Failed

 

Caution: This email was sent from someone outside of the University of Lethbridge. Do not click on links or open attachments unless you know they are safe. Suspicious emails should be forwarded to phis...@uleth.ca.

 

--

[Cameron, Jacob]

That should have said TLS 1.0 and 1.1 support.

 

 

--

Jake Cameron, BCS(UNB)

Systems Support Specialist III

Information Systems and Technical Services University of Lethbridge Library

Phone:(403)329-2756

This e-mail, including any and all attachments, is only for the use of the intended recipient(s) and may contain information that is confidential or privileged. If you are not the intended recipient, you are advised that any dissemination, copying or other use of this e-mail is prohibited. Please notify the sender of the error in communication by return e-mail and destroy all copies of this e-mail. Thank you.

 

To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/QB1PR01MB3908DF0263E484EF3720CD0984CD0%40QB1PR01MB3908.CANPRD01.PROD.OUTLOOK.COM.

[Humberto Blanco Castillo]

Hi for all, 

Today I finally found a solution, the problem was with the operating system. execute the following command 

 update-crypto-policies --set LEGACY  

and after reboot it has worked.

Thanks to everyone for your support.

[gonza...@gmail.com]

Just adding some info I've found troubleshooting the same error (javax.net.ssl.SSLHandshakeException: No appropriate protocol (protocol is disabled or cipher suites are inappropriate)

Running DSpace on Centos8 could require that command, depending on your mail provider, as far as TLS 1.0 and 1.1 are deprecated and a legacy mode is needed.

This solved the issue to me, using SMTPS under TLS on port 465

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/considerations_in_adopting_rhel_8/security_considerations-in-adopting-rhel-8#tls-v10-v11_security

[Cristhian Andres Rey Casadiego]

Hi everybody I had the same issue in debian and fixed it adding this in dspace.conf:

mail.extraproperties = mail.smtp.socketFactory.port=587, \

                        mail.smtp.starttls.enable=true, \

                        mail.smtp.starttls.required=true, \

                        mail.smtp.ssl.protocols=TLSv1.2

Best Regards,

Cristhian Rey

Colombia

[Agboola Raphael]

Yes,  Cristhian Rey method works for me.

Thanks

[Edu Reyes Delgado]

Cristhian's method worked for me too.!
Thanks for the help.!!!!

Regards,

[Chalew Tesfaye]

Cristhian's method worked for me too.!

Thank you

[Douglas Eder Uno Silva]

For me too!

Thanks Cristhian Andres Rey Casadiego !