smtp x509: certificate has expired or is not yet valid

[victorcoder]

This is what I'm trying to do:

// Set up authentication information.

        auth := smtp.PlainAuth(

                "",

                "test",

                "test",

                "smtp.season.es",

        )

        // Connect to the server, authenticate, set the sender and recipient,

        // and send the email all in one step.        

        err := smtp.SendMail(

                "smtp.season.es:25",

                auth,

                "sysadmin[at]season.es",

                []string{"sysadmin[at]season.es"},

                []byte("This is the email body."),

        )

        if err != nil {

                log.Fatal(err)

        }

You can test it with sample against my smtp server, and you'll see the error.

Username and password are ok but failing here too with "test" user/pass.

Am I doing something wrong or it's a bug?

[Mikkel Krautz]

Hi,

You're using the SendMail function. That function tries to use TLS if
the server advertises it. In this case, the server does advertise it,
but the certificate is self-signed and expired.

A workaround would be to copy the SendMail code into your own program
and skip the StartTLS call.

Mikkel

[victorcoder]

Hi,

You're using the SendMail function. That function tries to use TLS if
the server advertises it. In this case, the server does advertise it,
but the certificate is self-signed and expired.

A workaround would be to copy the SendMail code into your own program
and skip the StartTLS call.

Mikkel

Thanks Mikkel,

I wonder why not just encrypt the communication between parties ignoring if it's an expired certificate, that would be better that no communication at all, or better give the option to force skip TLS in SendMail call.

 

[Evan Shaw]

On Fri, Mar 16, 2012 at 5:15 AM, victorcoder <victo...@gmail.com> wrote:
> I wonder why not just encrypt the communication between parties ignoring if
> it's an expired certificate, that would be better that no communication at
> all, or better give the option to force skip TLS in SendMail call.

Some would disagree that ignoring an expired certificate is better.

SendMail is intended to be an easy way to send email with sensible
default behavior. Hopefully it covers most cases, but for those it
doesn't, the other functions in net/smtp are available.

- Evan