• V20: 3CX Re-engineered. Get V20 for increased security, better call management, a new admin console and Windows softphone. Learn More.

Solved Mail not working, certificate error, 3cx smtp server

Status
Not open for further replies.

Fabian Pfenninger

Joined
Aug 8, 2018
Messages
6
Reaction score
0
I am running the standard license and 15.5.0 with the built in smtp server. Built on the latest debian linux iso (about 2 days old).

As the HTTPS certificate issued by 3cx states a FQDN mycompany.3cx.ch I can login into the system panel.
Everything is green and working but the mail. I want to test the mail using the test button I get the following error:

"An error occurred while attempting to establish an SSL or TLS connection. The SSL certificate presented by the server is not trusted by the system for one or more of the following reasons: 1. The server is using a self-signed certificate which cannot be verified. 2. The local system is missing a Root or Intermediate certificate needed to verify the server's certificate. 3. The certificate presented by the server is expired or invalid. See https://github.com/jstedfast/MailKit/blob/master/FAQ.md#InvalidSslCertificate for possible solutions."

Reminder: Setting up using the latest ISO by 3cx posed a few issues as the debian repository entries were outdated and had to be replace, see my other thread.
 
Hi Fabian,

Does your Mail server have the relevant certificates to accept LetsEncrypt certificates as trusted?
 
Hi V..,

Thanks for your feedback.

We use Office365, and never had certificate problems.

Do I need to install some certificates to run the 3CX Mail function? And Where?

Greets
Fabian
 
Sorry, I misunterstood:
As far as I see, own Mail Servers are not supportet in our Test licence.
So I can't add our Office365 Email Server.
So we have to use the default 3CX Mail Server with the problem mentioned above.

Greets
Fabian
 
Standard license must use 3cx SMTP Server.
 
I'm pretty sure the OP has stated that they are using the 3CX SMTP server and that is what is giving the error. I'd reach out to 3CX support for this. I guess just confirm your date/time is correct on your instance as well.
 
I verified time and date and all is nominal. Rebooting many times. The system is up to date.
https://mycompany.3cx.ch gives me a "green flag" access (let's encrypt certificate).

Testing the mail will lead to this error:
"The SSL certificate presented by the server is not trusted by the system for one or more of the following reasons: 1. The server is using a self-signed certificate which cannot be verified. 2. The local system is missing a Root or Intermediate certificate needed to verify the server's certificate. 3. The certificate presented by the server is expired or invalid."

I don't know anything about local linux certificates or how they are created or maintained as I used the regular standard installation. How can I verify my local certificates?
 
Solved!

The firewall/content filter blocked the download from a CRT file:

2018:08:31-14:29:40 sg330a-2 httpproxy[6319]: id="0064" severity="info" sys="SecureWeb" sub="http" name="web request blocked, forbidden file extension detected" action="block" method="GET" srcip="172.17.xx.xxx" dstip="93.184.220.29" user="" group="" ad_domain="" statuscode="403" cached="0" profile="REF_HttProContaLanzhNetwo (wfp_surfing)" filteraction="REF_DefaultHTTPCFFAction (CFA protect (default))" size url="http://sv.symcb.com/sv.crt"
 
Glad to see the issue has been resolved and thank you for updating the thread with your solution.
 
Status
Not open for further replies.
Get 3CX - Absolutely Free!

Link up your team and customers Phone System Live Chat Video Conferencing

Hosted or Self-managed. Up to 10 users free forever. No credit card. Try risk free.

3CX
A 3CX Account with that email already exists. You will be redirected to the Customer Portal to sign in or reset your password if you've forgotten it.