Page 1 of 1
Sending email via TLS failed
Posted: Sat Feb 08, 2014 3:52 pm
by genmais
I've changed my Mail Settings from Security "None" to "TLS" as my email provider will discontinue unsecured email transport.
According to the email provider's manuals I also adjusted the port to 587. The provider specifies "STARTTLS" as the requested protocol, so I selected "TLS" in Nagios XI.
Unfortunately sending a test email fails:
A test email was sent to
[email protected]
----
Mailer said: Language string failed to load: tls
SMTP server error:
(method=smtp;host=smtp.web.de;port=587;smtpauth=true;security=tls)
An error occurred sending a test email!
Same email settings work fine with Thunderbird, however, in Nagios XI it doesn't work.
Any ideas? Thanks!
I'm using Nagios XI 2012R2.8c in a VM.
Re: Sending email via TLS failed
Posted: Mon Feb 10, 2014 11:04 am
by abrist
Can you post a large tail of your mail log?
EDIT: And a tail of the apache log:
Re: Sending email via TLS failed
Posted: Tue Feb 11, 2014 5:53 pm
by genmais
tail -25 /var/log/maillog
Code: Select all
Feb 9 08:00:06 nagiosxi postfix/qmgr[1398]: E5EAF5590: removed
Feb 9 09:56:14 nagiosxi postfix/postfix-script[14644]: stopping the Postfix mail system
Feb 9 09:56:14 nagiosxi postfix/master[1389]: terminating on signal 15
Feb 9 10:54:37 nagiosxi postfix/postfix-script[1360]: starting the Postfix mail system
Feb 9 10:54:37 nagiosxi postfix/master[1362]: daemon started -- version 2.6.6, configuration /etc/postfix
Feb 10 07:00:06 nagiosxi postfix/pickup[6246]: C567F5403: uid=0 from=<root>
Feb 10 07:00:06 nagiosxi postfix/cleanup[7598]: C567F5403: message-id=<[email protected]>
Feb 10 07:00:06 nagiosxi postfix/qmgr[1371]: C567F5403: from=<[email protected]>, size=3658, nrcpt=1 (queue active)
Feb 10 07:00:07 nagiosxi postfix/local[7600]: C567F5403: to=<[email protected]>, orig_to=<root>, relay=local, delay=0.26, delays=0.1/0.13/0/0.03, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 10 07:00:07 nagiosxi postfix/qmgr[1371]: C567F5403: removed
Feb 10 08:00:05 nagiosxi postfix/pickup[6246]: EFDEDE9E: uid=0 from=<root>
Feb 10 08:00:05 nagiosxi postfix/cleanup[24044]: EFDEDE9E: message-id=<[email protected]>
Feb 10 08:00:06 nagiosxi postfix/qmgr[1371]: EFDEDE9E: from=<[email protected]>, size=2636, nrcpt=1 (queue active)
Feb 10 08:00:06 nagiosxi postfix/local[24046]: EFDEDE9E: to=<[email protected]>, orig_to=<root@localhost>, relay=local, delay=0.06, delays=0.04/0.01/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 10 08:00:06 nagiosxi postfix/qmgr[1371]: EFDEDE9E: removed
Feb 11 07:00:06 nagiosxi postfix/pickup[513]: A8B3250B8: uid=0 from=<root>
Feb 11 07:00:06 nagiosxi postfix/cleanup[13181]: A8B3250B8: message-id=<[email protected]>
Feb 11 07:00:06 nagiosxi postfix/qmgr[1371]: A8B3250B8: from=<[email protected]>, size=3670, nrcpt=1 (queue active)
Feb 11 07:00:06 nagiosxi postfix/local[13183]: A8B3250B8: to=<[email protected]>, orig_to=<root>, relay=local, delay=0.08, delays=0.05/0.02/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 11 07:00:06 nagiosxi postfix/qmgr[1371]: A8B3250B8: removed
Feb 11 08:00:05 nagiosxi postfix/pickup[27755]: BD74951EB: uid=0 from=<root>
Feb 11 08:00:05 nagiosxi postfix/cleanup[29597]: BD74951EB: message-id=<[email protected]>
Feb 11 08:00:05 nagiosxi postfix/qmgr[1371]: BD74951EB: from=<[email protected]>, size=2647, nrcpt=1 (queue active)
Feb 11 08:00:05 nagiosxi postfix/local[29604]: BD74951EB: to=<[email protected]>, orig_to=<root@localhost>, relay=local, delay=0.11, delays=0.08/0.02/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 11 08:00:05 nagiosxi postfix/qmgr[1371]: BD74951EB: removed
tail -25 /var/log/httpd/error_log
Code: Select all
[Sun Feb 09 03:08:06 2014] [notice] Digest: generating secret for digest authentication ...
[Sun Feb 09 03:08:06 2014] [notice] Digest: done
[Sun Feb 09 03:08:06 2014] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.0-fips configured -- resuming normal operations
[Sun Feb 09 09:56:13 2014] [notice] caught SIGTERM, shutting down
[Sun Feb 09 10:54:40 2014] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Sun Feb 09 10:54:40 2014] [notice] Digest: generating secret for digest authentication ...
[Sun Feb 09 10:54:40 2014] [notice] Digest: done
[Sun Feb 09 10:54:46 2014] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.3.3 mod_ssl/2.2.15 OpenSSL/1.0.0-fips configured -- resuming normal operations
[Sun Feb 09 10:57:14 2014] [error] [client 192.168.2.34] PHP Warning: arsort() expects parameter 1 to be array, null given in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 517, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 10:57:14 2014] [error] [client 192.168.2.34] PHP Warning: Invalid argument supplied for foreach() in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 518, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 10:57:14 2014] [error] [client 192.168.2.34] PHP Notice: Undefined variable: c in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 521, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 10:57:15 2014] [error] [client 192.168.2.34] PHP Notice: Undefined variable: filterString in /usr/local/nagiosxi/html/includes/components/graphexplorer/templates/multistack.inc.php on line 23, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 10:57:36 2014] [error] [client 192.168.2.34] PHP Warning: arsort() expects parameter 1 to be array, null given in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 517, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 10:57:36 2014] [error] [client 192.168.2.34] PHP Warning: Invalid argument supplied for foreach() in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 518, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 10:57:36 2014] [error] [client 192.168.2.34] PHP Notice: Undefined variable: c in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 521, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 10:57:37 2014] [error] [client 192.168.2.34] PHP Notice: Undefined variable: filterString in /usr/local/nagiosxi/html/includes/components/graphexplorer/templates/multistack.inc.php on line 23, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:55:35 2014] [error] [client 192.168.2.34] PHP Warning: arsort() expects parameter 1 to be array, null given in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 517, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:55:35 2014] [error] [client 192.168.2.34] PHP Warning: Invalid argument supplied for foreach() in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 518, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:55:35 2014] [error] [client 192.168.2.34] PHP Notice: Undefined variable: c in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 521, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:55:35 2014] [error] [client 192.168.2.34] PHP Notice: Undefined variable: filterString in /usr/local/nagiosxi/html/includes/components/graphexplorer/templates/multistack.inc.php on line 23, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:56:16 2014] [error] [client 192.168.2.34] PHP Notice: Undefined variable: filterString in /usr/local/nagiosxi/html/includes/components/graphexplorer/templates/multistack.inc.php on line 23, referer: https://nagiosxi.schorsch.net/nagiosxi/dashboards/dashboard.php?id=d7mccig7
[Sun Feb 09 11:56:33 2014] [error] [client 192.168.2.34] PHP Warning: arsort() expects parameter 1 to be array, null given in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 517, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:56:33 2014] [error] [client 192.168.2.34] PHP Warning: Invalid argument supplied for foreach() in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 518, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:56:33 2014] [error] [client 192.168.2.34] PHP Notice: Undefined variable: c in /usr/local/nagiosxi/html/includes/components/latestalerts/latestalerts.inc.php on line 521, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
[Sun Feb 09 11:56:33 2014] [error] [client 192.168.2.34] PHP Notice: Undefined variable: filterString in /usr/local/nagiosxi/html/includes/components/graphexplorer/templates/multistack.inc.php on line 23, referer: https://nagiosxi.schorsch.net/nagiosxi//includes/page-home-main.php?&=
Maybe an interesting part from the time where I sent the tls test mail:
Code: Select all
[Sat Feb 08 21:35:12 2014] [error] [client 192.168.2.34] PHP Warning: stream_socket_enable_crypto(): SSL operation failed with code 1. OpenSSL Error messages:\nerror:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group\nerror:1408D010:SSL routines:SSL3_GET_KEY_EXCHANGE:EC lib in /usr/local/nagiosxi/html/includes/phpmailer/class.smtp.php on line 197, referer: https://nagiosxi.schorsch.net/nagiosxi/admin/testemail.php
Re: Sending email via TLS failed
Posted: Wed Feb 12, 2014 11:23 am
by slansing
Have you configured, or half configured SSL support in Nagios XI? Also, is mail from the XI server going through a relay or exchange that is requesting self signed emails?
Re: Sending email via TLS failed
Posted: Wed Feb 12, 2014 12:51 pm
by genmais
Yes, I've configured SSL for Nagios XI according to the manual. I'm using my own PKI with own Root CA. Using the Nagios XI web UI via SSL works fine.
Emails from Nagios XI directly go to the smtp server of my email provider (smpt.web.de). There is no email relay or exchange server in between.
Re: Sending email via TLS failed
Posted: Wed Feb 12, 2014 3:13 pm
by scottwilkerson
Can you post the output of
Code: Select all
cat /etc/*-release
yum list installed grep openssl
Thanks
Re: Sending email via TLS failed
Posted: Wed Feb 12, 2014 3:22 pm
by scottwilkerson
Re: Sending email via TLS failed
Posted: Wed Feb 12, 2014 3:42 pm
by genmais
Code: Select all
[root@nagiosxi ~]# cat /etc/*-release
CentOS release 6.4 (Final)
CentOS release 6.4 (Final)
CentOS release 6.4 (Final)
[root@nagiosxi ~]# yum list installed grep openssl
Loaded plugins: fastestmirror
Determining fastest mirrors
epel/metalink | 24 kB 00:00
* base: ftp.plusline.de
* epel: fedora.aau.at
* extras: ftp.plusline.de
* rpmforge: mirror1.hs-esslingen.de
* updates: ftp.halifax.rwth-aachen.de
base | 3.7 kB 00:00
cr | 2.9 kB 00:00
epel | 4.2 kB 00:00
epel/primary_db | 5.9 MB 00:05
extras | 3.4 kB 00:00
rpmforge | 1.9 kB 00:00
updates | 3.4 kB 00:00
updates/primary_db | 2.0 MB 00:01
Installed Packages
grep.x86_64 2.6.3-3.el6 @base
openssl.x86_64 1.0.1e-15.el6 @cr
[root@nagiosxi ~]# yum list installed | grep openssl
openssl.x86_64 1.0.1e-15.el6 @cr
openssl-devel.x86_64 1.0.1e-15.el6 @cr
Re: Sending email via TLS failed
Posted: Wed Feb 12, 2014 5:49 pm
by abrist
These are the versions I have:
Code: Select all
[root@nagiosxi libexec]# yum list installed | grep openssl
openssl.x86_64 1.0.1e-16.el6_5.1 @updates
openssl-devel.x86_64 1.0.1e-16.el6_5.1 @updates
Did you try to update openssl as Scott suggested?
Re: Sending email via TLS failed
Posted: Thu Feb 13, 2014 12:47 pm
by genmais
Great! I've updated OpenSSL and TLS is working fine now.
Thanks for your support!