Amazon, Olat, SMTP and TLS 1.2

11 views
Skip to first unread message

paul...@gmail.com

unread,
Aug 25, 2023, 7:55:20 PM8/25/23
to OpenOlat
Hello, we run OpenOlat on an Amazon server and we have received notification that Amazon endpoints will no longer accept TLS connections below TLS 1.2.   Also it appears from amazon logs that we are using SMTP from that server using TLS 1.1.   So my question is,  does the OpenOlat library that sends mail via SMTP use TLS version 1.2, or an earlier version, or if relevant at what point did an upgrade occur to support use of version 1.2?   ie what minimum version is required to resolve the problem?  
Thank you

Florian Gnaegi

unread,
Sep 18, 2023, 3:38:24 AM9/18/23
to open...@googlegroups.com
Hi 

I think TLS 1.2 should be fine. We normally send the mails to localhost and then forward them to the actual SMTP server. This has many advantages, e.g. the mail sending has a more synchronous character for the application (which means no lag in the user interface when sending mails) and normally you have a zillion options for your local mailserver that we do not support in OpenOlat. You have better logging, control etc. 

For a productive environment you should consider this setup. 

Cheers
Florian



Am 26.08.2023 um 01:55 schrieb paul...@gmail.com <paul...@gmail.com>:

Hello, we run OpenOlat on an Amazon server and we have received notification that Amazon endpoints will no longer accept TLS connections below TLS 1.2.   Also it appears from amazon logs that we are using SMTP from that server using TLS 1.1.   So my question is,  does the OpenOlat library that sends mail via SMTP use TLS version 1.2, or an earlier version, or if relevant at what point did an upgrade occur to support use of version 1.2?   ie what minimum version is required to resolve the problem?  
Thank you

--
--
Sie erhalten diese Nachricht, weil Sie Mitglied sind von Google
Groups-Gruppe "OpenOlat".
Für das Erstellen von Beiträgen in dieser Gruppe senden Sie eine E-Mail
an open...@googlegroups.com
Um sich von dieser Gruppe abzumelden, senden Sie eine E-Mail an
openolat+u...@googlegroups.com
Weitere Optionen finden Sie in dieser Gruppe unter
http://groups.google.com/group/openolat?hl=de
-------------------------------------------------------------------------------------------------------------------
OpenOlat - infinite learning - http://www.openolat.org
---
You received this message because you are subscribed to the Google Groups "OpenOlat" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openolat+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/openolat/85645ad6-b248-4665-aa7f-3f6ab16782e2n%40googlegroups.com.

--------------------------------------------------------------------
professional services for the e-learning system OpenOlat
hosting - operating - support - development - mobile - consulting
--------------------------------------------------------------------
frentix  GmbH
Florian Gnägi, Geschäftsführer
Okenstrasse 6
CH-8037 Zürich, Switzerland


Find me on mastodon linkedin 
--------------------------------------------------------------------



Reply all
Reply to author
Forward
0 new messages