Trouble-shoot Administrator Mail config

[nosteakhouse]

Hi there,

I am trying to install Sandstorm.io to a VPS (CPU Xeon 2x2.60 GHz, RAM 2 Gb, Disk 30GB SSD) with Ubuntu 22 x64 as OS.

This process has been successfully executed (Sandstorm is running; PID = XXXXX).

Consequentially, I head over to my sandstorm domain in order to create an admin account using the setup wizard.
Here, everything is glitter and fun but for the last step of 'Create admin account', that is 'Admin account':
When creating the admin account with e-mail, this yields an "internal server error".

For email delivery, I have tried ports 465, 587, 25 and 2525.

I attached a screenshot of 'Email configuration' page of the Admin panel, as well as the error message from sending a test mail.

This doc https://docs.sandstorm.io/en/latest/administering/email/ suggests using Sendgrid or Mailgun, but I would very much like to use a runbox-hosted-email-address as admin log in credential (I have tried this Proton acc first, but SMTP relay won't work here - I have checked this with customer support). We currently don't hold a domain of our own, but are open to buy one (I assume it's necessary to accommodate for the grain-wise publicId).

Here comes the sys log:

** Starting Sandstorm at: Thu Jul  6 12:51:35 2023 ** Starting back-end... ** Starting MongoDB... note: noprealloc may hurt performance in many applications about to fork child process, waiting until server is ready for connections. forked process: 8 child process started successfully, parent exiting Successfully added user: { "user" : "sandstorm", "roles" : [ "readWriteAnyDatabase", "userAdminAnyDatabase", "dbAdminAnyDatabase" ] } ** Back-end and Mongo started; now starting front-end... ** Starting Gateway... (node:69) [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from() methods instead. (Use `node --trace-deprecation ...` to show where the warning was created) Thu, 06 Jul 2023 12:51:45 GMT body-parser deprecated undefined extended: provide extended option at app/app.js:1220:39 Migrations already applied: 0/41 Applying migration 1 Applied migration 1 Applying migration 2 Applied migration 2 Applying migration 3 Applied migration 3 Applying migration 4 Applied migration 4 Applying migration 5 Applied migration 5 Applying migration 6 Applied migration 6 Applying migration 7 Applied migration 7 Applying migration 8 Applied migration 8 Applying migration 9 Applied migration 9 Applying migration 10 Applied migration 10 Applying migration 11 Applied migration 11 Applying migration 12 Applied migration 12 Applying migration 13 Applied migration 13 Applying migration 14 Applied migration 14 Applying migration 15 Applied migration 15 Applying migration 16 Applied migration 16 Applying migration 17 Applied migration 17 Applying migration 18 Applied migration 18 Applying migration 19 Applied migration 19 Applying migration 20 Applied migration 20 Applying migration 21 Applied migration 21 Applying migration 22 Applied migration 22 Applying migration 23 Applied migration 23 Applying migration 24 Applied migration 24 Applying migration 25 Applied migration 25 Applying migration 26 Applied migration 26 Applying migration 27 Applied migration 27 Applying migration 28 Applied migration 28 Applying migration 29 Applied migration 29 Applying migration 30 Applied migration 30 Applying migration 31 Applied migration 31 Applying migration 32 Applied migration 32 Applying migration 33 Applied migration 33 Applying migration 34 Applied migration 34 Applying migration 35 Applied migration 35 Applying migration 36 ** Migrating to new identity model! ** see: https://sandstorm.io/news/2017-05-08-refactoring-identities tagging accounts... tagging credentials... building identity map... migrating users... migrating ApiTokens... migrating membrane requirements... migrating identity capabilities... migrating contacts... migrating notifications... migrating desktop notifications... migrating subscriptions... Applied migration 36 Applying migration 37 Applied migration 37 Applying migration 38 Applied migration 38 Applying migration 39 Applied migration 39 Applying migration 40 Applied migration 40 Applying migration 41 Applied migration 41 Running new server startup function 1 Running new server startup function 1 sandstorm/gateway.c++:1029: error: refused HTTPS connection because no TLS keys are configured sandstorm/gateway.c++:1029: error: refused HTTPS connection because no TLS keys are configured Downloading app: https://app-index.sandstorm.io/packages/c4c975c3adbeeb77fd928bb90202c049 Downloading app: https://app-index.sandstorm.io/packages/3bbe34dfae9609a4134c85dde9030cf0 Downloading app: https://app-index.sandstorm.io/packages/bf4d676cf1f6ad39d528ae0c65ca12e1 Downloading app: https://app-index.sandstorm.io/packages/7e0fc8fce431c4646c0133fa18cae535 Downloading app: https://app-index.sandstorm.io/packages/5198a2ec87bcc4b29e787b77079ba590 App ready: 7e0fc8fce431c4646c0133fa18cae535 fetching keybase 6B7486EA873576FD72845C5E50E4D7384B1B4D65 ACME.js notification: certificate_order {   account: {     key: {       kid: 'https://acme-v02.api.letsencrypt.org/acme/acct/1193783947'     }   },   subject: '*.nosteakhouse.sandcats.io',   altnames: [ '*.nosteakhouse.sandcats.io', 'nosteakhouse.sandcats.io' ],   challengeTypes: [ 'dns-01' ] } ACME.js notification: challenge_select {   altname: '*.nosteakhouse.sandcats.io',   type: 'dns-01',   dnsHost: '_acme-challenge.nosteakhouse.sandcats.io',   keyAuthorization: 'AhVq0zFo0CD81ePnw48K5Jyi0CDDhMGE3c1YJO-WDiQ.xDeTNoDBa6jZDMZPMXZOP5os84-sBeqZxUQH7FevocY' } ACME.js notification: _challenge_select {   altname: '*.nosteakhouse.sandcats.io',   type: 'dns-01',   challenge: {     identifier: { type: 'dns', value: 'nosteakhouse.sandcats.io' },     status: 'pending',     expires: '2023-07-13T12:51:59Z',     challenges: [ [Object] ],     wildcard: true,     type: 'dns-01',     url: 'https://acme-v02.api.letsencrypt.org/acme/chall-v3/243176690127/pDBKOQ',     token: 'AhVq0zFo0CD81ePnw48K5Jyi0CDDhMGE3c1YJO-WDiQ',     hostname: 'nosteakhouse.sandcats.io',     altname: '*.nosteakhouse.sandcats.io',     thumbprint: 'xDeTNoDBa6jZDMZPMXZOP5os84-sBeqZxUQH7FevocY',     keyAuthorization: 'AhVq0zFo0CD81ePnw48K5Jyi0CDDhMGE3c1YJO-WDiQ.xDeTNoDBa6jZDMZPMXZOP5os84-sBeqZxUQH7FevocY',     dnsHost: '_acme-challenge.nosteakhouse.sandcats.io',     dnsAuthorization: 'j_r5XNia7CTygOb1CEIuGLX1FnPgnzdPT1nRXtlfIyE',     keyAuthorizationDigest: 'j_r5XNia7CTygOb1CEIuGLX1FnPgnzdPT1nRXtlfIyE',     dnsZone: 'nosteakhouse.sandcats.io',     dnsPrefix: '_acme-challenge'   } } ACME.js notification: challenge_select {   altname: 'nosteakhouse.sandcats.io',   type: 'dns-01',   dnsHost: '_acme-challenge.nosteakhouse.sandcats.io',   keyAuthorization: 'xvPB2Yo2GhujxJQMcVhbrXfDKYD05Pq_5qQEm4_dq5M.xDeTNoDBa6jZDMZPMXZOP5os84-sBeqZxUQH7FevocY' } ACME.js notification: _challenge_select {   altname: 'nosteakhouse.sandcats.io',   type: 'dns-01',   challenge: {     identifier: { type: 'dns', value: 'nosteakhouse.sandcats.io' },     status: 'pending',     expires: '2023-07-13T12:51:59Z',     challenges: [ [Object], [Object], [Object] ],     type: 'dns-01',     url: 'https://acme-v02.api.letsencrypt.org/acme/chall-v3/243176690137/hiS2OQ',     token: 'xvPB2Yo2GhujxJQMcVhbrXfDKYD05Pq_5qQEm4_dq5M',     hostname: 'nosteakhouse.sandcats.io',     altname: 'nosteakhouse.sandcats.io',     thumbprint: 'xDeTNoDBa6jZDMZPMXZOP5os84-sBeqZxUQH7FevocY',     keyAuthorization: 'xvPB2Yo2GhujxJQMcVhbrXfDKYD05Pq_5qQEm4_dq5M.xDeTNoDBa6jZDMZPMXZOP5os84-sBeqZxUQH7FevocY',     dnsHost: '_acme-challenge.nosteakhouse.sandcats.io',     dnsAuthorization: 'aFFgluzBkkXE91qtQO6GF5Wh74gYD5e7HP7FyO5X4tg',     keyAuthorizationDigest: 'aFFgluzBkkXE91qtQO6GF5Wh74gYD5e7HP7FyO5X4tg',     dnsZone: 'nosteakhouse.sandcats.io',     dnsPrefix: '_acme-challenge'   } } ACME.js notification: challenge_status {   status: 'pending',   type: 'dns-01',   altname: '*.nosteakhouse.sandcats.io' } ACME.js notification: challenge_status {   status: 'valid',   type: 'dns-01',   altname: '*.nosteakhouse.sandcats.io' } ACME.js notification: challenge_status {   status: 'pending',   type: 'dns-01',   altname: 'nosteakhouse.sandcats.io' } ACME.js notification: challenge_status {   status: 'valid',   type: 'dns-01',   altname: 'nosteakhouse.sandcats.io' } ACME.js notification: certificate_status { subject: '*.nosteakhouse.sandcats.io', status: 'valid' } Certificate was successfully renewed! Planning to renew certificate at: 2023-09-04T11:52:11.333Z sandstorm/gateway.c++:966: info: Loading TLS key into Gateway App ready: 3bbe34dfae9609a4134c85dde9030cf0 fetching keybase C0B2C432638DAEB0D70715C7F654B8C7D4CA3CB8 App ready: 5198a2ec87bcc4b29e787b77079ba590 fetching keybase 5C5580353165D42FD89E1371A9FF0AD7DEE40258 App ready: bf4d676cf1f6ad39d528ae0c65ca12e1 fetching keybase D95FF05115356E73D9AAEBA834952FA52E8A5E3A App ready: c4c975c3adbeeb77fd928bb90202c049 fetching keybase 211BF6A1E4CD72C957B705FA8EE8B9250C803854 Admin token deleted. sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000b8:SSL routines:OPENSSL_internal:NO_SHARED_CIPHER stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000f0:SSL routines:OPENSSL_internal:UNSUPPORTED_PROTOCOL stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000b8:SSL routines:OPENSSL_internal:NO_SHARED_CIPHER stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000f0:SSL routines:OPENSSL_internal:UNSUPPORTED_PROTOCOL stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000b8:SSL routines:OPENSSL_internal:NO_SHARED_CIPHER stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 Exception while invoking method 'createAndEmailTokenForUser' Error: Connection timeout     at SMTPConnection._formatError (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:528:15)     at SMTPConnection._onError (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:514:16)     at SMTPConnection.<anonymous> (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:236:14)     at listOnTimeout (internal/timers.js:557:17)     at processTimers (internal/timers.js:500:7) kj/compat/http.c++:7233: info: threw exception while serving HTTP response; exception = kj/compat/tls.c++:254: failed: expected shutdownTask == nullptr [(can't stringify) == nullptr]; already called shutdownWrite() stack: 5a83ab 4bc0e8 4fa150 4fca90 sandstorm/gateway.c++:1072: error: exception = kj/compat/http.c++:1969: failed: expected !inBody; previous HTTP message body incomplete; can't write more messages stack: 4c8f5c 509ca7 4aa33c 4fcbde 4fce2b 508990 kj/compat/http.c++:7233: info: threw exception while serving HTTP response; exception = kj/compat/tls.c++:254: failed: expected shutdownTask == nullptr [(can't stringify) == nullptr]; already called shutdownWrite() stack: 5a83ab 4bc0e8 4fa150 4fca90 sandstorm/gateway.c++:1072: error: exception = kj/compat/http.c++:1969: failed: expected !inBody; previous HTTP message body incomplete; can't write more messages stack: 4c8f5c 509ca7 4aa33c 4fcbde 4fce2b 508990 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000b8:SSL routines:OPENSSL_internal:NO_SHARED_CIPHER stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000f0:SSL routines:OPENSSL_internal:UNSUPPORTED_PROTOCOL stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000b8:SSL routines:OPENSSL_internal:NO_SHARED_CIPHER stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:1000009c:SSL routines:OPENSSL_internal:HTTP_REQUEST stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 Exception while invoking method 'createAndEmailTokenForUser' Error: Connection timeout     at SMTPConnection._formatError (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:528:15)     at SMTPConnection._onError (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:514:16)     at SMTPConnection.<anonymous> (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:236:14)     at listOnTimeout (internal/timers.js:557:17)     at processTimers (internal/timers.js:500:7) Exception while invoking method 'createAndEmailTokenForUser' Error: Connection timeout     at SMTPConnection._formatError (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:528:15)     at SMTPConnection._onError (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:514:16)     at SMTPConnection.<anonymous> (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:236:14)     at listOnTimeout (internal/timers.js:557:17)     at processTimers (internal/timers.js:500:7) kj/compat/http.c++:7233: info: threw exception while serving HTTP response; exception = kj/compat/tls.c++:254: failed: expected shutdownTask == nullptr [(can't stringify) == nullptr]; already called shutdownWrite() stack: 5a83ab 4bc0e8 4fa150 4fca90 sandstorm/gateway.c++:1072: error: exception = kj/compat/http.c++:1969: failed: expected !inBody; previous HTTP message body incomplete; can't write more messages stack: 4c8f5c 509ca7 4aa33c 4fcbde 4fce2b 508990 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000b8:SSL routines:OPENSSL_internal:NO_SHARED_CIPHER stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000f0:SSL routines:OPENSSL_internal:UNSUPPORTED_PROTOCOL stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000b8:SSL routines:OPENSSL_internal:NO_SHARED_CIPHER stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 kj/compat/http.c++:7233: info: threw exception while serving HTTP response; exception = kj/compat/tls.c++:254: failed: expected shutdownTask == nullptr [(can't stringify) == nullptr]; already called shutdownWrite() stack: 5a83ab 4bc0e8 4fa150 4fca90 sandstorm/gateway.c++:1072: error: exception = kj/compat/http.c++:1969: failed: expected !inBody; previous HTTP message body incomplete; can't write more messages stack: 4c8f5c 509ca7 4aa33c 4fcbde 4fce2b 508990 Exception while invoking method 'createAndEmailTokenForUser' Error: Connection timeout     at SMTPConnection._formatError (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:528:15)     at SMTPConnection._onError (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:514:16)     at SMTPConnection.<anonymous> (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:236:14)     at listOnTimeout (internal/timers.js:557:17)     at processTimers (internal/timers.js:500:7) Exception while invoking method 'createAndEmailTokenForUser' Error: Connection timeout     at SMTPConnection._formatError (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:528:15)     at SMTPConnection._onError (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:514:16)     at SMTPConnection.<anonymous> (/programs/server/npm/node_modules/smtp-connection/lib/smtp-connection.js:236:14)     at listOnTimeout (internal/timers.js:557:17)     at processTimers (internal/timers.js:500:7) sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:1000009c:SSL routines:OPENSSL_internal:HTTP_REQUEST stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:1000009c:SSL routines:OPENSSL_internal:HTTP_REQUEST stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:1000009c:SSL routines:OPENSSL_internal:HTTP_REQUEST stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 kj/compat/http.c++:7233: info: threw exception while serving HTTP response; exception = kj/compat/tls.c++:254: failed: expected shutdownTask == nullptr [(can't stringify) == nullptr]; already called shutdownWrite() stack: 5a83ab 4bc0e8 4fa150 4fca90 sandstorm/gateway.c++:1072: error: exception = kj/compat/http.c++:1969: failed: expected !inBody; previous HTTP message body incomplete; can't write more messages stack: 4c8f5c 509ca7 4aa33c 4fcbde 4fce2b 508990 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000b8:SSL routines:OPENSSL_internal:NO_SHARED_CIPHER stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000f0:SSL routines:OPENSSL_internal:UNSUPPORTED_PROTOCOL stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000b8:SSL routines:OPENSSL_internal:NO_SHARED_CIPHER stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:1000009c:SSL routines:OPENSSL_internal:HTTP_REQUEST stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:1000009c:SSL routines:OPENSSL_internal:HTTP_REQUEST stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0 sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:1000009c:SSL routines:OPENSSL_internal:HTTP_REQUEST stack: 59e537 5a559e 5a5ba8 5a6260 5a1030 607ec0

I hope we can get this up and running :)

Kind regards,

Mina

[Troy Farrell]

Hi Mina.

Thanks for trying Sandstorm. These error messages indicate that Sandstorm is trying to establish a TLS connection and failing. "NO_SHARED_CIPHER" and "UNSUPPORTED_PROTOCOL" are the error messages in the logs that you've shared. I would guess that Sandstorm failed to negotiate the connection with your mail server, but I don't know enough about that part of Sandstorm to be certain. My first step would be to try a different SMTP server. (I know that is not a trivial thing to do.)  After that, I would make sure that your server is not stuck behind a proxy that is interfering with connections to the SMTP server.

Good luck!

Troy