Page 1 of 1

TLS errors ?

Posted: Fri Feb 27, 2015 3:22 pm
by Remuz
Hi,

I recently started using VetaCP for my self-hosted email. Just recently I installed my own certificate for my domain, It all ran fine for a while. But a few days ago I started to have delivery problems for all domains within vesta.

I'm getting the following error from Google:

Code: Select all

Delivery to the following recipient failed permanently:

     [email protected]

Technical details of permanent failure: 
Google tried to deliver your message, but it was rejected by the server for the recipient domain domain.tld by mail.domain.tld. [x.x.x.x].

The error that the other server returned was:
454 TLS currently unavailable
And thunderbird is giving me this error when trying to send mail.

Code: Select all

Sending of message failed.
An error occurred sending mail: Unable to establish a secure link with SMTP server mail.domain.tld using STARTTLS since it doesn't advertise that feature. Switch off STARTTLS for that server or contact your service provider.
But using telnet I'm seeing this:

Code: Select all

root@Mail~ # telnet mail.domain.tld 25
Trying x.x.x.x ...
Connected to mail.domain.tld.
Escape character is '^]'.
220 mail.domain.tld ESMTP Exim 4.80 Fri, 27 Feb 2015 10:17:04 -0500
ehlo google.com
250-mail.domain.tld Hello google.com [x.x.x.x]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-AUTH PLAIN LOGIN
250-STARTTLS
250 HELP
If you need any information to help diagnose this, feel free to ask away. I'm completely lost on how to fix this.

Re: TLS errors ?

Posted: Fri Feb 27, 2015 10:05 pm
by drMacFaulty
Remuz wrote:Hi,

I recently started using VetaCP for my self-hosted email. Just recently I installed my own certificate for my domain, It all ran fine for a while. But a few days ago I started to have delivery problems for all domains within vesta.

I'm getting the following error from Google:

Code: Select all

Delivery to the following recipient failed permanently:

     [email protected]

Technical details of permanent failure: 
Google tried to deliver your message, but it was rejected by the server for the recipient domain domain.tld by mail.domain.tld. [x.x.x.x].

The error that the other server returned was:
454 TLS currently unavailable
And thunderbird is giving me this error when trying to send mail.

Code: Select all

Sending of message failed.
An error occurred sending mail: Unable to establish a secure link with SMTP server mail.domain.tld using STARTTLS since it doesn't advertise that feature. Switch off STARTTLS for that server or contact your service provider.
But using telnet I'm seeing this:

Code: Select all

root@Mail~ # telnet mail.domain.tld 25
Trying x.x.x.x ...
Connected to mail.domain.tld.
Escape character is '^]'.
220 mail.domain.tld ESMTP Exim 4.80 Fri, 27 Feb 2015 10:17:04 -0500
ehlo google.com
250-mail.domain.tld Hello google.com [x.x.x.x]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-AUTH PLAIN LOGIN
250-STARTTLS
250 HELP
If you need any information to help diagnose this, feel free to ask away. I'm completely lost on how to fix this.
Can you post mail logs in debug mode? From Exim as well as from Dovecot.

Thanks!

Re: TLS errors ?

Posted: Sat Feb 28, 2015 4:38 pm
by Remuz
drMacFaulty wrote:
Can you post mail logs in debug mode? From Exim as well as from Dovecot.

Thanks!
Excuse my ignorance, but how would I go about that?

Re: TLS errors ?

Posted: Sat Feb 28, 2015 5:00 pm
by skurudo
Remuz, see in /var/log

Re: TLS errors ?

Posted: Sun Mar 01, 2015 5:35 pm
by Remuz
skurudo wrote:Remuz, see in /var/log
I'm aware that's where the logs are. But I don't see any that appear to be debug logs.

Or am I just being dumb?

Re: TLS errors ?

Posted: Mon Mar 02, 2015 4:15 pm
by drMacFaulty
Remuz wrote:
skurudo wrote:Remuz, see in /var/log
I'm aware that's where the logs are. But I don't see any that appear to be debug logs.

Or am I just being dumb?
Just enable debug mode in exim and dovecot and send a mail. Then post exim and dovecot log here ;)