Try submission run file

#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SMTPD="/var/qmail/bin/qmail-smtpd"
TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
HOSTNAME=`hostname`
VCHKPW="/home/vpopmail/bin/vchkpw"
export FORCETLS=0
export SMTPAUTH="!"

exec /usr/bin/softlimit -m 128000000 \
    /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
    -u "$QMAILDUID" -g "$NOFILESGID" 0 587 \
    $SMTPD $VCHKPW /bin/true 2>&1


Thunderbird:

Port: 587

Connection Security: STARTTLS

Authentication: Normal Password


On 3/22/2024 6:34 PM, Gary Bowling wrote:


Rocky 9.3.


Gary


On 3/22/2024 8:31 PM, Eric Broch wrote:

What are you running EL 8 or 9?

On 3/22/2024 6:28 PM, Gary Bowling wrote:


Yea did that.


I tried what Remo suggested, which was to change the client send config to:

port 465

SSL/TLS

Normal Password


This should send mail through the /var/qmail/supervise/smtps/ config. That worked, which told me my certs were actually ok.


So now I needed to figure out how to make "Port 587, startTLS, and Encrypted Password" work. Which goes through /var/qmail/supervise/submission

I changed the run file in that directory by removing the line:

export SMTPAUTH="!"

and adding the lines

export FORCETLS=1

export SMTPAUTH="!+cram"


And now I can send mail through the submission port by configuring a client to "Port 587, startTLS, and Encrypted Password" and I can also send mail through "port 465, SSL/TLS, normal password"


That allows me to not have to reconfigure the clients who have configurations on port 587.


Eric - Do you see anything wrong with doing it that way?


Thanks, Gary



On 3/22/2024 8:08 PM, Eric Broch wrote:

cat /etc/letsencrypt/live/mydomain.com/fullchain.pem /etc/letsencrypt/live/mydomain.com/privkey.pem > /var/qmail/control/servercert.pem

On 3/22/2024 4:29 PM, g...@gbco.us wrote:

I can send mail via the roundcube web mail. That's where this message is coming from.

When sending mail from thunderbird, I have my smtp server set up in my client as

Port 587
startTLS
Encrypted Password

This is the same as I had with a number of clients on my old server.

When I try to send email, I get this error.

Sending of the message failed.
An error occurred while sending mail: Outgoing server (SMTP) error. The server responded:  TLS no valid RSA private key: error:FFFFFFFF80000002:system library::No such file or directory (#4.3.0).


To create certificates on my new server. I retrieved certs from letencrypt and then did this.

cp -p /var/qmail/control/servercert.pem /var/qmail/control/servercert.pem.lastmonth cat /etc/letsencrypt/live/mail.gbco.us/{cert,chain,fullchain,privkey}.pem > /var/qmail/control/servercert.pem

chown vpopmail:qmail /var/qmail/control/servercert.pem
chmod 640 /var/qmail/control/servercert.pem



Any idea what's going on with this error?

thanks, Gary

---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

--------------------------------------------------------------------- To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
--------------------------------------------------------------------- To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Reply via email to