Resolved Error with certificate on Thunderbird

[Ickov]

Server operating system version

Ubuntu 20.04.4 LTS

Plesk version and microupdate number

Version 18.0.44 Update

Hi all,

i have problem with sending email through Tunderbird problem with certificate ROOT SSL is with Let's Encript also mail ,

error on thunderbird is :

Sending of the message failed.
Peer’s Certificate has expired.
The configuration related to domain.tld must be corrected


on SSH side i see

-> warning: TLS library problem: error:14094415:SSL routines:ssl3_read_bytes:sslv3 alert certificate expired:../ssl/record/rec_layer_s3.c:1543:SSL alert number 45:

when i try to send via Horde/Roundcube everything is ok ,

can someone advise what is wrong here , already try to reissue the certificate but error still show

thanks in advance

 

[Ickov]

Anyone who can help ?

 

[Maarten.]

Does this help?

Thread 'ssl3_read_bytes:sslv3 alert certificate expired'
Resolved - ssl3_read_bytes:sslv3 alert certificate expired

 

[Ickov]

Does this help?

Thread 'ssl3_read_bytes:sslv3 alert certificate expired'
Resolved - ssl3_read_bytes:sslv3 alert certificate expired

Thanks for advise ,

you mean to execute this command :
sed -i 's/mozilla\/DST_Root_CA_X3.crt/!mozilla\/DST_Root_CA_X3.crt/g' /etc/ca-certificates.conf
update-ca-certificates

btw it is ubuntu i do not know if it is compatible

 

[Ickov]

it is very strange that on only one email client that shows , all other are funtion

 

[Bitpalast]

Is your operating system old like Win 7 or Vista? In that case it might be the computer's SSL root that has not been updated.

 

[Ickov]

Is your operating system old like Win 7 or Vista? In that case it might be the computer's SSL root that has not been updated.

Nope,

it is windows10,

will say again , on that domain there are 10 email accounts, till now all function and only one email during sending message it show that error, also i use roundcube and everything is ok

E-mail software is Mozzila Thunderbird, tried to reinstall , delete all files in $app-data but nothing

 

[Dave W]

Check Thunderbird outgoing mail settings for that email account.

 

[Ickov]

Check Thunderbird outgoing mail settings for that email account.

Everything is good there,

also on server is checked auto mail discover , and all settings are take automatically

nothing for additional setup

 

[Bitpalast]

Everything is good there,

Please provide a screenshot of your outgoing mail server configuration.

 

[Ickov]

From error and from SMTP

 

[Bitpalast]

You are using the wrong hostname. For martini.mk there is no current mail certificate on your server. To fix the issue, either enter a host name into Thunderbird that has an SSL certificate for the mail server or create a mail server certificate for your domain on the server (e.g. by adding the mail option to the domain's SSL certificate.)

 

[Ickov]

Hi, thanks for explanations,

i am not sure but i think i use same hostname and certificate

please check picture

 

[Bitpalast]

Are you using the "mail" subdomain in any place on the server? It seems that for a yet unknown reason mail servers think the mail server's name is mail.<your domainname>, not just <your domain name>, and for the mail subdomain there is no matching certificate. Have you tried to create a server certificate instead of using the domain/subscription certificate for the server, so that according to your DNS entries that are probably managed on the same Plesk system (?) all necessary names are included in that server certificate?

 

[Ickov]

Hi, thanks for advise

sorry for late replay,

little confused, you like to tell me to create different certificate (on section - see picture 1)

because till now never had problem like that

 

[Maarten.]

Open the subscription of the domain and check on the Mail Settings tab which certificate is assigned to mail.martini.mk:

 

[Ickov]

Please check attachment

 

[Ickov]

Problem solved

1. re-issue Lets encrypt
2. use plesk-repair mail (ssh)
3. reload postfix (ssh)

can be closed

 

[marvin]

Hi @Ickov, I'm having the same problem. I've already done step one of your process, can you give me more information about step 2 and 3. Is this done in command line on SSH or is it in the Plesk interface?

Email is stil working on Mac Mail, IOS and webmail, just not Thunderbird ??