TLS connect failed when emailing

[Kiwilink]

Hi there,

Having troubles sending emails to a particular domain. We are able to send to that domain fine from another server that is a simple postfix server.

The error that comes back (again and again) in mail.indo when sending is:

Dec 1 14:39:13 cindy qmail: 1228095553.794893 delivery 116: deferral: TLS_connect_failed;_connected_to_203.97.xxx.xx./

And then eventually:

Dec 1 10:53:46 cindy qmail: 1228082026.243666 delivery 6: failure: TLS_connect_failed;_connected_to_203.97.xxx.xx./I'm_not_going_to_try_again;_this_message_has_been_in_the_queue_too_long./

I was also able to connect to the recieving server from our server and send an email no problems through telnet.

I found some older forums that gave some suggestions:
http://forum.swsoft.com/showthread.php?t=31470
http://forum.swsoft.com/showthread.php?t=20060
http://www.mail-archive.com/[email protected]/msg18421.html

I have done what has been suggested on all of these with no luck. That mainly is removing (to another location, can put them back if needed) /var/qmail/control/*.pem

Can anyone be of any assistance? The customer is starting to get rather anxious to get this resolved. I don't care if I have to turn off encription of the emails or whatever, we just want to to get through to them.

Thanks,

Ian.
Kiwilink Internet Services.

 

[Kiwilink]

Aha!

I knew it!

It was the other end. Their system thought it did TLS but their certificate didn't contain TLS details, thus it did not work.

It would have been kinda like,

"Hey you got TLS Bro?"
"Oh yeah!"
"Sweet, prove it to me"
"oh na."
"1228095553.794893 delivery 116: deferral: TLS_connect_failed;_connected_to_203.97.xxx.xx./"

If you are a member there is more information here:
http://www.experts-exchange.com/vie...JWK49LTT1guNXRSf9QRd40Ao1qLB&shared=0&cid=859

What does TLS really actually do? I can't understand why it is so fault intolerant. I know it copes when there is no TLS, but from what I have seen around while looking into this problem as soon as it strikes even a small problem it freaks out.

It would be nice also if Plesk had a way to turn TLS off easially through the mail server settings in Plesk GUI.

Hope this helps someone.

 

[Christopher Cookson]

How did you solve this?

I see you mentioned what the problem was, but do you have specifics on how you solved this problem?
I've struck the same issue on Plesk 9.x
I assume it's just a case of disabling TLS, but some specifics on how to do this on Plesk, along with any possible side effects to be aware of, would be helpful.

 

[Emmanuel_Pando]

Hi!
the same problem..
Did solve it?