Graylog can't send e-mails since we have a new mailserver

Graylog Central (peer support)
1

The error message is as follows:
"### An error occurred while trying to send an email! (triggered a few seconds ago)

The Graylog server encountered an error while trying to send an email. This is the detailed error message: org.apache.commons.mail.EmailException: Sending the email to the following server failed : imap.fleuchaus.com:587 (javax.mail.MessagingException: Could not convert socket to TLS; nested exception is: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)"

Any ideas on how I might solve this?

2

I checked it, and your new server uses self signed certificate, which graylog don’t like:
openssl s_client -starttls smtp -showcerts -connect imap.fleuchaus.com:587 -servername imap.fleuchaus.com

Anyway, your SMTP server uses a lot of old protocols like RC4, SSL3 and so on:
nmap -Pn --script ssl-enum-ciphers imap.fleuchaus.com -p 587
https://www.immuniweb.com/ssl/?id=jeMgCjEK

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.