• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue Couldn’t open secure TLS connection to SMTP via warning: TLS library problem

taibro

New Pleskian
I couldn’t send email via desktop emal client or Horde or Roundcube. In Roundcube is error 220: error of authorization. From desktop – timeout, SMTP doesnt answer to desktop mail client and nothing written in the mail error log.

A few months it worked properly. Look like in happened after new year.

In my logs with self-signed SSL certificate:
success postfix/smtpd[25014]: connect from success.secretlab.work[127.0.0.1]
success postfix/smtpd[25014]: SSL_accept error from success.secretlab.work[127.0.0.1]: 0
success postfix/smtpd[25014]: warning: TLS library problem: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca:s3_pkt.c:1300:SSL alert number 48:
success postfix/smtpd[25014]: lost connection after STARTTLS from success.secretlab.work[127.0.0.1]
success postfix/smtpd[25014]: disconnect from success.secretlab.work[127.0.0.1]​

With Lets encrypt SSL certificate just 3 line:
success postfix/smtpd[25014]: connect from success.secretlab.work[127.0.0.1]
success postfix/smtpd[25014]: lost connection after STARTTLS from success.secretlab.work[127.0.0.1]
success postfix/smtpd[25014]: disconnect from success.secretlab.work[127.0.0.1]​

But Mailer daemon report with error:
Out: 454 4.7.0 TLS not available due to local problem​

I did try:
- to set other self-signet certificate for securing mail
- change postfix to qmail and back (qmail doesn’t work also)
- plesk repair mail
- comment the line at /postfix/main.cf #smtpd_tls_protocols = TLSv1 TLSv1.1 TLSv1.2

Main /postfix/main.cf: http://pastebin.com/7Dh3UMYX
/postfix/master.cf: http://pastebin.com/itKCsevD

I spent whole day and have no more ideas what happened and how to fix that.
 
Back
Top