Qmail and TLS

[deltatech]

I am currently running Plesk 11 and was told by Parallels support that qmail does not support TLS on plesk 11.

I am considering upgrading to Plesk 12 and was wondering if qmail on Plesk 12 will support TLS?

 

[IgorG]

I have switched from Postfix to Qmail on my test Plesk 12 server and checked that TLS is supported:

[root@ppu12-0 ~]# telnet localhost 25
Trying ::1...
Connected to localhost.
Escape character is '^]'.
220 ppu12-0.demo.pp.plesk.ru ESMTP
ehlo
250-ppu12-0.demo.pp.plesk.ru
250-AUTH=LOGIN CRAM-MD5 PLAIN
250-AUTH LOGIN CRAM-MD5 PLAIN
250-STARTTLS
250-PIPELINING
250 8BITMIME

 

[IgorG]

Additionally:

# openssl s_client -starttls smtp -crlf -connect localhost:25 | grep TLS
....
250 8BITMIME
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-GCM-SHA384
Protocol : TLSv1.2
TLS session ticket lifetime hint: 300 (seconds)

 

[deltatech]

Additionally:

# openssl s_client -starttls smtp -crlf -connect localhost:25 | grep TLS
....
250 8BITMIME
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-GCM-SHA384
Protocol : TLSv1.2
TLS session ticket lifetime hint: 300 (seconds)

On Plesk 11 I get this, any way to fix this on plesk 11?...

# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 myserver.com ESMTP
EHLO
250-myserver.com
250-AUTH=LOGIN CRAM-MD5
250-AUTH LOGIN CRAM-MD5
250-PIPELINING
250 8BITMIME

Note it is missing the 250-STARTTLS

 

[IgorG]

When you send the EHLO command, the server will respond with a list of the items it supports.

 

[deltatech]

When you send the EHLO command, the server will respond with a list of the items it supports.

That is the problem, it doesn't list STARTTLS on my plesk 11 box. Is there any way to fix this without upgrading to plesk 12? I do have a support contract so I could upgrade but I am afraid of upgrades as they usually cause too much downtime and my clients can't go days without their email..

 

[IgorG]

All works fine by default on my test Plesk 11.5:

root@ppu11-5:~# telnet localhost 25
Trying ::1...
Connected to localhost.
Escape character is '^]'.
220 ppu11-5.demo.pp.plesk.ru ESMTP
ehlo
250-ppu11-5.demo.pp.plesk.ru
250-AUTH=LOGIN CRAM-MD5 PLAIN
250-AUTH LOGIN CRAM-MD5 PLAIN
250-STARTTLS
250-PIPELINING
250 8BITMIME
quit
221 ppu11-5.demo.pp.plesk.ru
Connection closed by foreign host.

root@ppu11-5:~# cat /usr/local/psa/version
11.5.30 Debian 6.0 115140407.17