Failed to establish encrypted connection with SMTP
I'm not able to use my emails via Outlook. I'll explain all the steps I followed for better understanding.
I just finished configuring my mail server using this Linode Guide, using the default configurations and Dovecot's auto-signed SSL:
I tested if everything works using my Outlook. The incoming server is working perfectly but the SMTP is not.
I've found out that my ISP is blocking the port 25 and so I found this guide (link below) and edited my /etc/postfix/master.cf, uncommenting the submission line like this:
submission inet n – n – – smtpd
The guide said it'll enable to use the port 587 for outgoing emails.
Done that, ok. I'm using these configurations on my Outlook to connect to my email:
IMAP: mail.example.com.br - port 993 (SSL)
IMAP: mail.example.com.br - port 587 (TLS)
My SMTP requires authentication
It's still not working. If I use the port 587 using SSL, it returns the error "encryption method not supported". If I use TLS, it gives the error "failed to establish encrypted connection".
I'm having this issue for several days, I looked at several forums and with Linode Managed and nobody could solve this yet. If somebody can suggest some solution, I'd be very grateful.
Thanks.
5 Replies
@derfy:
I was going to try and use openssl's s_client feature to try and help you, but I doubt you own mail.example.com.br. How about some real domains?
My domain is mail.thebeach915.com.br
CONNECTED(00000003)
depth=0 O = Dovecot mail server, OU = levelcom.li484-186.members.linode.com, CN = levelcom.li484-186.members.linode.com, emailAddress = root@levelcom.li484-186.members.linode.com
verify error:num=18:self signed certificate
Your cert is using the default rDNS. You may wish to <url url="https://library.linode.com/adding-dns-records#sph_setting-reverse-dns">~~[](https://library.linode.com/adding-dns-records#sph_setting-reverse-dns)~~[change this to mail.thebeach915.com.br](https://library.linode.com/adding-dns-records#sph_setting-reverse-dns)</url> and remake the cert.
I was able to connect to port 993 with just SSL. However, 587 was a problem:````
derfy@derfy:~$ openssl s_client -starttls smtp -connect mail.thebeach915.com.br:587
CONNECTED(00000003)
3074197128:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:749:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 7 bytes and written 225 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
---
derfy@derfy:~$
Hopefully, others can help you futher.
I should use thebeach915.com.br or mail.thebeach915.com.br?