(SOLVED)Problem SSL on smtp login

Piradoxlanieve · Nov 25th 2014

Quote

Ubuntu Desktop 12.04 "Precise Pangolin
i-MSCP Version 1.1.18
Apache FCGID & courier

Hello, I have a problem sending emails using SSL, the error is this:

Quote

Nov 25 16:28:10 panel postfix/smtpd[14997]: warning: Wrapper-mode request dropped from 62.42.114.248.dyn.user.ono.com[62.42.114.248] for service smtps. TLS context initialization failed. For details see earlier warnings in your logs.
Nov 25 16:28:10 panel postfix/smtpd[14997]: disconnect from 62.42.114.248.dyn.user.ono.com[62.42.114.248]

On imap and pop3 working is ok.

I read this post:

Quote

Problems after upgrade to 1.1.14 (SSL/TLS and manageSieve not working properly)

but I can not find the solution , any ideas.

Sorry my bad english

mafioso · Nov 25th 2014

Please update your thread:
i-MSCP bugs - Reporting rules

PS:

Quote

For details see earlier warnings in your logs.

Please post also the "earlier warnings" in your logs

**Nuxwin** · Nov 25th 2014

@Ninos

You're too nice... Next time, just delete

Piradoxlanieve · Nov 25th 2014

where you can find them? I am new to linux, the server is installed on Ubuntu 12.04, thanks

**Nuxwin** · Nov 25th 2014

God...

The earlier logs from /var/log/mail.log please

Edit: Post also your /etc/postfix/main.cf there.

Piradoxlanieve · Nov 25th 2014

Code

Nov 25 17:20:16 panel postfix/anvil[7584]: statistics: max connection count 1 for (smtp:94.143.18.144) at Nov 25 17:16:56
Nov 25 17:20:16 panel postfix/anvil[7584]: statistics: max cache size 1 at Nov 25 17:16:56
Nov 25 17:21:02 panel postfix/pickup[5180]: E0A196A427C9: uid=1001 from=<[email=info@nubeshop.com]info@nubeshop.com[/email]>
Nov 25 17:21:02 panel postfix/cleanup[15376]: E0A196A427C9: message-id=<[email=20141125162102.E0A196A427C9@panel.nubeshop.net]20141125162102.E0A196A427C9@panel.nubeshop.net[/email]>
Nov 25 17:21:02 panel postfix/qmgr[22530]: E0A196A427C9: from=<[email=info@nubeshop.com]info@nubeshop.com[/email]>, size=992, nrcpt=1 (queue active)
Nov 25 17:21:04 panel postfix/smtp[15381]: E0A196A427C9: to=<[email=macwebenterprises@gmail.com]macwebenterprises@gmail.com[/email]>, relay=gmail-smtp-in.l.google.com[64.233.166.27]:25, delay=1.9, delays=0.11/0/0.58/1.2, dsn=2.0.0, status=sent (250 2.0.0 OK 1416932464 br6si2630944wjc.156 - gsmtp)
Nov 25 17:21:04 panel postfix/qmgr[22530]: E0A196A427C9: removed
Nov 25 17:21:12 panel postfix/trivial-rewrite[15378]: table hash:/etc/postfix/imscp/domains(0,lock|fold_fix) has changed -- restarting
Nov 25 17:21:33 panel postfix/qmgr[22530]: table hash:/etc/postfix/imscp/relay_domains(0,lock|fold_fix) has changed -- restarting
Nov 25 17:21:59 panel pop3d-ssl: Connection, ip=[::ffff:62.42.114.248]
Nov 25 17:21:59 panel pop3d-ssl: LOGIN, user=info@informaticapuente.com, ip=[::ffff:62.42.114.248], port=[31907]
Nov 25 17:22:00 panel pop3d-ssl: LOGOUT, user=info@informaticapuente.com, ip=[::ffff:62.42.114.248], port=[31907], top=0, retr=13087, rcvd=32, sent=13752, time=1, stls=1
Nov 25 17:23:05 panel imapd-ssl: Connection, ip=[::ffff:62.42.114.248]
Nov 25 17:23:05 panel imapd-ssl: LOGIN, user=info@informaticapuente.com, ip=[::ffff:62.42.114.248], port=[51142], protocol=IMAP
Nov 25 17:31:59 panel pop3d-ssl: Connection, ip=[::ffff:62.42.114.248]
Nov 25 17:31:59 panel pop3d-ssl: LOGIN, user=info@informaticapuente.com, ip=[::ffff:62.42.114.248], port=[34794]
Nov 25 17:31:59 panel pop3d-ssl: LOGOUT, user=info@informaticapuente.com, ip=[::ffff:62.42.114.248], port=[34794], top=0, retr=0, rcvd=24, sent=447, time=0, stls=1
Nov 25 17:33:40 panel imapd-ssl: couriertls: read: Connection timed out
Nov 25 17:33:40 panel imapd-ssl: DISCONNECTED, user=info@informaticapuente.com, ip=[::ffff:62.42.114.248], headers=0, body=0, rcvd=116, sent=743, time=1539, starttls=1
Nov 25 17:34:02 panel imapd-ssl: TIMEOUT, user=info@informaticapuente.com, ip=[::ffff:62.42.114.248], headers=0, body=0, rcvd=201, sent=1237, time=1802, starttls=1
Nov 25 17:38:03 panel imapd-ssl: Connection, ip=[::ffff:62.42.114.248]
Nov 25 17:38:04 panel imapd-ssl: LOGIN, user=info@informaticapuente.com, ip=[::ffff:62.42.114.248], port=[51156], protocol=IMAP
Nov 25 17:41:59 panel pop3d-ssl: Connection, ip=[::ffff:62.42.114.248]
Nov 25 17:41:59 panel pop3d-ssl: LOGIN, user=info@informaticapuente.com, ip=[::ffff:62.42.114.248], port=[37810]
Nov 25 17:42:00 panel pop3d-ssl: LOGOUT, user=info@informaticapuente.com, ip=[::ffff:62.42.114.248], port=[37810], top=0, retr=0, rcvd=24, sent=447, time=1, stls=1
Nov 25 17:43:57 panel pop3d-ssl: Connection, ip=[::ffff:62.42.114.248]
Nov 25 17:43:57 panel pop3d-ssl: LOGIN, user=info@informaticapuente.com, ip=[::ffff:62.42.114.248], port=[38384]
Nov 25 17:43:57 panel pop3d-ssl: LOGOUT, user=info@informaticapuente.com, ip=[::ffff:62.42.114.248], port=[38384], top=0, retr=0, rcvd=24, sent=447, time=0, stls=1
Nov 25 17:44:25 panel postfix/smtpd[20196]: warning: No server certs available. TLS won't be enabled
Nov 25 17:44:26 panel postfix/smtpd[20196]: connect from 62.42.114.248.dyn.user.ono.com[62.42.114.248]
Nov 25 17:44:26 panel postfix/smtpd[20196]: warning: Wrapper-mode request dropped from 62.42.114.248.dyn.user.ono.com[62.42.114.248] for service smtps. TLS context initialization failed. For details see earlier warnings in your logs.
Nov 25 17:44:26 panel postfix/smtpd[20196]: disconnect from 62.42.114.248.dyn.user.ono.com[62.42.114.248]
Nov 25 17:48:59 panel imapd-ssl: Connection, ip=[::ffff:62.42.114.248]
Nov 25 17:48:59 panel imapd-ssl: LOGIN, user=info@informaticapuente.com, ip=[::ffff:62.42.114.248], port=[51160], protocol=IMAP

Display More

Piradoxlanieve · Nov 25th 2014

/etc/postfix/main.cf

Code

# Postfix directory settings; These are critical for normal Postfix MTA functionallity
command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
# Some common configuration parameters
inet_protocols = ipv4
inet_interfaces = all
mynetworks_style = host
# IPv4 source for outbound mails
smtp_bind_address = 87.98.228.227
# IPv6 source for outbound mails
#smtp_bind_address6 =
myhostname = panel.nubeshop.net
mydomain = panel.nubeshop.net.local
myorigin = $myhostname
smtpd_banner = $myhostname ESMTP i-MSCP 1.1.18 Managed
setgid_group = postdrop
# Receiving messages parameters
mydestination = $myhostname, $mydomain
append_dot_mydomain = no
append_at_myorigin = yes
local_transport = local
transport_maps = hash:/etc/postfix/imscp/transport
relay_domains = hash:/etc/postfix/imscp/relay_domains
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
# Delivering local messages parameters
mail_spool_directory = /var/mail
# Mailboxquota
# => 0 for unlimited
# => 104857600 for 100 MB
mailbox_size_limit = 0
mailbox_command = procmail -a "$EXTENSION"
# Message size limit
# => 0 for unlimited
# => 104857600 for 100 MB
message_size_limit = 0
biff = no
recipient_delimiter = +
local_destination_recipient_limit = 1
local_recipient_maps = unix:passwd.byname $alias_database
# i-MSCP Autoresponder parameters
imscp-arpl_destination_recipient_limit = 1
# Delivering virtual messages parameters
virtual_mailbox_base = /var/mail/virtual
virtual_mailbox_limit = 0
virtual_mailbox_domains = hash:/etc/postfix/imscp/domains
virtual_mailbox_maps = hash:/etc/postfix/imscp/mailboxes
virtual_alias_maps = hash:/etc/postfix/imscp/aliases
virtual_minimum_uid = 999
virtual_uid_maps = static:999
virtual_gid_maps = static:8
# SASL parameters
smtpd_sasl_type = cyrus
smtpd_sasl_path = smtpd
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_sasl_authenticated_header = yes
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_invalid_helo_hostname,
reject_non_fqdn_helo_hostname
smtpd_sender_restrictions = reject_non_fqdn_sender,
reject_unknown_sender_domain,
permit_mynetworks,
permit_sasl_authenticated
smtpd_recipient_restrictions = reject_non_fqdn_recipient,
reject_unknown_recipient_domain,
permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
reject_unlisted_recipient,
# check_policy_service inet:127.0.0.1:12525,
# check_policy_service inet:127.0.0.1:10023,
permit
smtpd_data_restrictions = reject_multi_recipient_bounce,
reject_unauth_pipelining
# TLS parameters
#smtpd_tls_security_level = may
#smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
#smtpd_tls_protocols = !SSLv2, !SSLv3
#smtpd_tls_loglevel = 0
#smtpd_tls_cert_file = /etc/imscp/imscp_services.pem
#smtpd_tls_key_file = /etc/imscp/imscp_services.pem
#smtpd_tls_auth_only = no
#smtpd_tls_received_header = yes
#smtp_tls_security_level = may
#smtp_tls_mandatory_protocols = !SSLv2, !SSLv3
#smtp_tls_protocols = !SSLv2, !SSLv3
#smtp_tls_loglevel = 0
#smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
virtual_transport = maildrop
maildrop_destination_concurrency_limit = 2
maildrop_destination_recipient_limit = 1

Display More

**Nuxwin** · Nov 25th 2014

Re;

Please look at the bottom of your main.cf... As you can see, SSL is not enabled for postfix (all lines are commented). Well here, I don't know what you have done exactly but...

Try to run the imscp-setup script as follow:

Shell-Script

# perl /var/www/imscp/engine/setup/imscp-setup -dar ssl

And when you are asked for ssl (for the services), just answer correctly.

Piradoxlanieve · Nov 25th 2014

Thanks (Solved)

(SOLVED)Problem SSL on smtp login

Share

Daily visitors