Sending email via TLS failed

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
genmais
Posts: 19
Joined: Sun Jan 12, 2014 3:19 am

Sending email via TLS failed

Post by genmais »

I've changed my Mail Settings from Security "None" to "TLS" as my email provider will discontinue unsecured email transport.
According to the email provider's manuals I also adjusted the port to 587. The provider specifies "STARTTLS" as the requested protocol, so I selected "TLS" in Nagios XI.

Unfortunately sending a test email fails:
A test email was sent to [email protected]
----
Mailer said: Language string failed to load: tls

SMTP server error:
(method=smtp;host=smtp.web.de;port=587;smtpauth=true;security=tls)
An error occurred sending a test email!
Same email settings work fine with Thunderbird, however, in Nagios XI it doesn't work.

Any ideas? Thanks!

I'm using Nagios XI 2012R2.8c in a VM.
Top
abrist
Red Shirt
Posts: 8334
Joined: Thu Nov 15, 2012 1:20 pm

Re: Sending email via TLS failed

Post by abrist »

Can you post a large tail of your mail log?

Code: Select all

tail -25 /var/log/maillog
EDIT: And a tail of the apache log:

Code: Select all

tail -25 /var/log/httpd/error_log
Former Nagios employee
"It is turtles. All. The. Way. Down. . . .and maybe an elephant or two."
VI VI VI - The editor of the Beast!
Come to the Dark Side.
Top
genmais
Posts: 19
Joined: Sun Jan 12, 2014 3:19 am

Re: Sending email via TLS failed

Post by genmais »

tail -25 /var/log/maillog

Code: Select all

Feb  9 08:00:06 nagiosxi postfix/qmgr[1398]: E5EAF5590: removed
Feb  9 09:56:14 nagiosxi postfix/postfix-script[14644]: stopping the Postfix mail system
Feb  9 09:56:14 nagiosxi postfix/master[1389]: terminating on signal 15
Feb  9 10:54:37 nagiosxi postfix/postfix-script[1360]: starting the Postfix mail system
Feb  9 10:54:37 nagiosxi postfix/master[1362]: daemon started -- version 2.6.6, configuration /etc/postfix
Feb 10 07:00:06 nagiosxi postfix/pickup[6246]: C567F5403: uid=0 from=<root>
Feb 10 07:00:06 nagiosxi postfix/cleanup[7598]: C567F5403: message-id=<[email protected]>
Feb 10 07:00:06 nagiosxi postfix/qmgr[1371]: C567F5403: from=<[email protected]>, size=3658, nrcpt=1 (queue active)
Feb 10 07:00:07 nagiosxi postfix/local[7600]: C567F5403: to=<[email protected]>, orig_to=<root>, relay=local, delay=0.26, delays=0.1/0.13/0/0.03, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 10 07:00:07 nagiosxi postfix/qmgr[1371]: C567F5403: removed
Feb 10 08:00:05 nagiosxi postfix/pickup[6246]: EFDEDE9E: uid=0 from=<root>
Feb 10 08:00:05 nagiosxi postfix/cleanup[24044]: EFDEDE9E: message-id=<[email protected]>
Feb 10 08:00:06 nagiosxi postfix/qmgr[1371]: EFDEDE9E: from=<[email protected]>, size=2636, nrcpt=1 (queue active)
Feb 10 08:00:06 nagiosxi postfix/local[24046]: EFDEDE9E: to=<[email protected]>, orig_to=<root@localhost>, relay=local, delay=0.06, delays=0.04/0.01/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 10 08:00:06 nagiosxi postfix/qmgr[1371]: EFDEDE9E: removed
Feb 11 07:00:06 nagiosxi postfix/pickup[513]: A8B3250B8: uid=0 from=<root>
Feb 11 07:00:06 nagiosxi postfix/cleanup[13181]: A8B3250B8: message-id=<[email protected]>
Feb 11 07:00:06 nagiosxi postfix/qmgr[1371]: A8B3250B8: from=<[email protected]>, size=3670, nrcpt=1 (queue active)
Feb 11 07:00:06 nagiosxi postfix/local[13183]: A8B3250B8: to=<[email protected]>, orig_to=<root>, relay=local, delay=0.08, delays=0.05/0.02/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 11 07:00:06 nagiosxi postfix/qmgr[1371]: A8B3250B8: removed
Feb 11 08:00:05 nagiosxi postfix/pickup[27755]: BD74951EB: uid=0 from=<root>
Feb 11 08:00:05 nagiosxi postfix/cleanup[29597]: BD74951EB: message-id=<[email protected]>
Feb 11 08:00:05 nagiosxi postfix/qmgr[1371]: BD74951EB: from=<[email protected]>, size=2647, nrcpt=1 (queue active)
Feb 11 08:00:05 nagiosxi postfix/local[29604]: BD74951EB: to=<[email protected]>, orig_to=<root@localhost>, relay=local, delay=0.11, delays=0.08/0.02/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 11 08:00:05 nagiosxi postfix/qmgr[1371]: BD74951EB: removed
tail -25 /var/log/httpd/error_log

Code: Select all

[Sun Feb 09 03:08:06 2014] [notice] Digest: generating secret for digest authentication ...
[Sun Feb 09 03:08:06 2014] [notice] Digest: done
[Sun Feb 09 03:08:06 2014] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.0-fips configured -- resuming normal operations
[Sun Feb 09 09:56:13 2014] [notice] caught SIGTERM, shutting down
[Sun Feb 09 10:54:40 2014] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Sun Feb 09 10:54:40 2014] [notice] Digest: generating secret for digest authentication ...
[Sun Feb 09 10:54:40 2014] [notice] Digest: done
[Sun Feb 09 10:54:46 2014] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.0-fips configured -- resuming normal operations
[Sun Feb 09 10:57:14 2014] [error] [client 192.168.2.34] PHP Warning:  arsort() expects parameter 1 to be array, null given in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 517, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 10:57:14 2014] [error] [client 192.168.2.34] PHP Warning:  Invalid argument supplied for foreach() in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 518, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 10:57:14 2014] [error] [client 192.168.2.34] PHP Notice:  Undefined variable: c in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 521, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 10:57:15 2014] [error] [client 192.168.2.34] PHP Notice:  Undefined variable: filterString in /usr/local/nagiosxi/html/includes/components/graphexplorer/templates/multistack.inc.php on line 23, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 10:57:36 2014] [error] [client 192.168.2.34] PHP Warning:  arsort() expects parameter 1 to be array, null given in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 517, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 10:57:36 2014] [error] [client 192.168.2.34] PHP Warning:  Invalid argument supplied for foreach() in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 518, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 10:57:36 2014] [error] [client 192.168.2.34] PHP Notice:  Undefined variable: c in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 521, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 10:57:37 2014] [error] [client 192.168.2.34] PHP Notice:  Undefined variable: filterString in /usr/local/nagiosxi/html/includes/components/graphexplorer/templates/multistack.inc.php on line 23, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:55:35 2014] [error] [client 192.168.2.34] PHP Warning:  arsort() expects parameter 1 to be array, null given in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 517, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:55:35 2014] [error] [client 192.168.2.34] PHP Warning:  Invalid argument supplied for foreach() in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 518, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:55:35 2014] [error] [client 192.168.2.34] PHP Notice:  Undefined variable: c in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 521, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:55:35 2014] [error] [client 192.168.2.34] PHP Notice:  Undefined variable: filterString in /usr/local/nagiosxi/html/includes/components/graphexplorer/templates/multistack.inc.php on line 23, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:56:16 2014] [error] [client 192.168.2.34] PHP Notice:  Undefined variable: filterString in /usr/local/nagiosxi/html/includes/components/graphexplorer/templates/multistack.inc.php on line 23, referer: https://nagiosxi.schorsch.net/nagiosxi/dashboards/dashboard.php?id=d7mccig7
[Sun Feb 09 11:56:33 2014] [error] [client 192.168.2.34] PHP Warning:  arsort() expects parameter 1 to be array, null given in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 517, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:56:33 2014] [error] [client 192.168.2.34] PHP Warning:  Invalid argument supplied for foreach() in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 518, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:56:33 2014] [error] [client 192.168.2.34] PHP Notice:  Undefined variable: c in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 521, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:56:33 2014] [error] [client 192.168.2.34] PHP Notice:  Undefined variable: filterString in /usr/local/nagiosxi/html/includes/components/graphexplorer/templates/multistack.inc.php on line 23, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
Maybe an interesting part from the time where I sent the tls test mail:

Code: Select all

[Sat Feb 08 21:35:12 2014] [error] [client 192.168.2.34] PHP Warning:  stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages:\nerror:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group\nerror:1408D010:SSL routines:SSL3_GET_KEY_EXCHANGE:EC lib in /usr/local/nagiosxi/html/includes/phpmailer/class.smtp.php on line 197, referer: https://nagiosxi.schorsch.net/nagiosxi/admin/testemail.php
Top
slansing
Posts: 7698
Joined: Mon Apr 23, 2012 4:28 pm
Location: Travelling through time and space...

Re: Sending email via TLS failed

Post by slansing »

Have you configured, or half configured SSL support in Nagios XI? Also, is mail from the XI server going through a relay or exchange that is requesting self signed emails?
Top
genmais
Posts: 19
Joined: Sun Jan 12, 2014 3:19 am

Re: Sending email via TLS failed

Post by genmais »

Yes, I've configured SSL for Nagios XI according to the manual. I'm using my own PKI with own Root CA. Using the Nagios XI web UI via SSL works fine.
Emails from Nagios XI directly go to the smtp server of my email provider (smpt.web.de). There is no email relay or exchange server in between.
Top
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:
Contact scottwilkerson

Re: Sending email via TLS failed

Post by scottwilkerson »

Can you post the output of

Code: Select all

cat /etc/*-release
yum list installed grep openssl
Thanks
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
Top
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:
Contact scottwilkerson

Re: Sending email via TLS failed

Post by scottwilkerson »

You may need to

Code: Select all

yum update openssl -y
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
Top
genmais
Posts: 19
Joined: Sun Jan 12, 2014 3:19 am

Re: Sending email via TLS failed

Post by genmais »

Code: Select all

[root@nagiosxi ~]# cat /etc/*-release
CentOS release 6.4 (Final)
CentOS release 6.4 (Final)
CentOS release 6.4 (Final)
[root@nagiosxi ~]# yum list installed grep openssl
Loaded plugins: fastestmirror
Determining fastest mirrors
epel/metalink                                                                                                |  24 kB     00:00
 * base: ftp.plusline.de
 * epel: fedora.aau.at
 * extras: ftp.plusline.de
 * rpmforge: mirror1.hs-esslingen.de
 * updates: ftp.halifax.rwth-aachen.de
base                                                                                                         | 3.7 kB     00:00
cr                                                                                                           | 2.9 kB     00:00
epel                                                                                                         | 4.2 kB     00:00
epel/primary_db                                                                                              | 5.9 MB     00:05
extras                                                                                                       | 3.4 kB     00:00
rpmforge                                                                                                     | 1.9 kB     00:00
updates                                                                                                      | 3.4 kB     00:00
updates/primary_db                                                                                           | 2.0 MB     00:01
Installed Packages
grep.x86_64                                                     2.6.3-3.el6                                                    @base
openssl.x86_64                                                  1.0.1e-15.el6                                                  @cr
[root@nagiosxi ~]# yum list installed | grep openssl
openssl.x86_64                       1.0.1e-15.el6                     @cr
openssl-devel.x86_64                 1.0.1e-15.el6                     @cr
Top
abrist
Red Shirt
Posts: 8334
Joined: Thu Nov 15, 2012 1:20 pm

Re: Sending email via TLS failed

Post by abrist »

These are the versions I have:

Code: Select all

[root@nagiosxi libexec]# yum list installed | grep openssl
openssl.x86_64                        1.0.1e-16.el6_5.1                @updates
openssl-devel.x86_64                  1.0.1e-16.el6_5.1                @updates
Did you try to update openssl as Scott suggested?

Code: Select all

yum update openssl -y
Former Nagios employee
"It is turtles. All. The. Way. Down. . . .and maybe an elephant or two."
VI VI VI - The editor of the Beast!
Come to the Dark Side.
Top
genmais
Posts: 19
Joined: Sun Jan 12, 2014 3:19 am

Re: Sending email via TLS failed

Post by genmais »

Great! I've updated OpenSSL and TLS is working fine now.

Thanks for your support!
Top
Locked

Return to “Nagios XI”