Graylog smtp sending fail

[Wolfang (Gatto)]

Hello everyone, hope somebody can help me

1. Describe your incident:

i have this incident on my graylog configuration.
that work in juin but stop working 2 month ago i don’t knwo why

2. Describe your environment:

• OS Information: Debian 11

• Package Version: graylog 5.1 mongodb 5.17 elasticsearch 7.12

• Service logs, configurations, and environment variables:

Email transport

transport_email_enabled = true
transport_email_hostname = ssl0.ovh.net
transport_email_port = 465
transport_email_use_auth = true
transport_email_auth_username = XXXXXXXXXXX
transport_email_auth_password = XXXXXXXXXXXXX
transport_email_from_email = XXXXXXXXXX
transport_email_subject_prefix=[graylog]

Encryption settings

ATTENTION:

Using SMTP with STARTTLS and SMTPS at the same time is not possible.

Use SMTP with STARTTLS

transport_email_use_tls = false

Use SMTP over SSL (SMTPS)

This is deprecated on most SMTP services!

transport_email_use_ssl = true

if tou want some other log i can share if you said to me where can i find them

3. What steps have you already taken to try and solve the problem?

i try to change transport_email_port = 465 to 587 or 25

Use SMTP with STARTTLS

transport_email_use_tls = false / true

Use SMTP over SSL (SMTPS)

This is deprecated on most SMTP services!

transport_email_use_ssl = true / false

4. How can the community help?

Can you help me to find why this error are still there pls

Thank

[drewmiranda-gl (Drew Miranda)]

Are you able to consult with your email administrator (or if this is a public service, the service’s documentation) on how to correctly configure?

Also, is the email server using a public certificate? Graylog needs to be able to trust the certificate of the mail server and will not understand how to trust private certificates. There is no way to disable SMTP TLS verification.

In order to trust a non-public cert, you will need to use a custom java key store (JKS) and import the certificate chain into the JKS file. See the ‘JAVA KEY STORE’, ‘IMPORT CERTS’ and ‘CONFIGURE GRAYLOG’ section of How-To Guide: Securing Graylog with TLS

[Wolfang (Gatto)]

Thank you so much for your help.

I find solution to my problem. my mail server only take TLSv1.2 aund i don’t config it in the server.conf. that why my system doen’t start.