lkpwizard.blogg.se

I disabled MTA-STS and email is now flowing again to gmail.īut I still need to resolve the issue with STARTTLS not being advertised. I read through the v20 release notes and found where the controls for MTA-STS (as well as REQUIRETLS). To: MTA-STS failure for : STARTTLS not supported Visit us on | Facebook | LinkedIn | YouTube I highly recommend that we try to fix the issues you were seeing instead of simply disabling these features. > I do want to use TLS and MTA-STA (for obvious reasons). In MDaemon under, Security / Security Manager / SSL & TLS / MDaemon, can you post a screen shot of the check boxes at the top so we can see which ones are currently enabled?

Lastly, when I use tools like MXtoolbox and some other STARTTLS testing tools they all come back failing with TLS not being offered.Ĭan you post a log snippet of your server trying to send to gmail when MTA-STS was enabled and the session was failing?Ĭan you post a snippet of your server now that shows STARTTLS not being advertised? Just something is going on that prevents the STARTTLS command from initiating. Strange thing is if I telnet in to the server at port 465 (be it from an external connection or an internal connection) I can see it connects and the data is encrypted as the telnet connection just goes to a blinking underscore. The certificate being used is a Comodo cert- although I also tried a self signed cert with the same results. I've verified that the option for STARTTLS is enabled in Mdaemon as well as verifying the ports are open and accessible through the firewall. So something is going on- the STARTTLS command never appears in the handshake at all. But mail would send- just without using TLS.

STARTTLS was working correctly before the upgrade to version 20.Įdit: in looking at the old logs for the previous 19.5.5 install I can see that STARTTLS was not functioning there either. Mdaemon shows that it's active and is using the correct certificate. Since upgrading to version 20 STARTTLS no longer works. I believe I know what the root cause of this failure is.