Cert Hostname DOES NOT VERIFY

Discussion in 'Installation/Configuration' started by Oitsuki, Aug 5, 2024.

  1. Oitsuki

    Oitsuki Member

    Hello,

    From my application when I tried to send an email via application, I have this result. How to resolve that ?
    you can find more information here : https://www.checktls.com/TestReceiver . Test on clicshopping.org

    Thank you


    Cert Hostname DOES NOT VERIFY (mail.clicshopping.org != vps.clicshopping.eu | DNS:vps.clicshopping.eu) So email is encrypted but the host is not verified

    it's seems there is a conflict clicshopping.com

    openssl s_client -connect mail.clicshopping.org:443
    CONNECTED(00000003)
    depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
    verify return:1
    depth=1 C = US, O = Let's Encrypt, CN = R10
    verify return:1
    depth=0 CN = clicshopping.com
    verify return:1
    ---
    Certificate chain
    0 s:CN = clicshopping.com
    i:C = US, O = Let's Encrypt, CN = R10
    a:pKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA256
    v:NotBefore: Jul 16 19:20:12 2024 GMT; NotAfter: Oct 14 19:20:11 2024 GMT
    1 s:C = US, O = Let's Encrypt, CN = R10
    i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
    a:pKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
    v:NotBefore: Mar 13 00:00:00 2024 GMT; NotAfter: Mar 12 23:59:59 2027 GMT
    ......

    -----END CERTIFICATE-----
    subject=CN = clicshopping.com
    issuer=C = US, O = Let's Encrypt, CN = R10
    ---
    No client certificate CA names sent
    Peer signing digest: SHA256
    Peer signature type: RSA-PSS
    Server Temp Key: X25519, 253 bits
    ---
    SSL handshake has read 3653 bytes and written 403 bytes
    Verification: OK
    ---
    New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
    Server public key is 4096 bit
    Secure Renegotiation IS NOT supported
    Compression: NONE
    Expansion: NONE
    No ALPN negotiated
    Early data was not sent
    Verify return code: 0 (ok)
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    The SSL cert and setup is fine, you are just using a wrong mail server name in your application. If your system hostname is vps.clicshopping.eu, then the SSL cert for your system is vps.clicshopping.eu (which is correct, according to your post) which then means you must use vps.clicshopping.eu in your application to send emails, but currently you seem to use a wrong name mail.clicshopping.eu there. So you must change mail.clicshopping.eu to vps.clicshopping.eu in the settings of your mail sending application.
     
    ahrasis likes this.
  3. Oitsuki

    Oitsuki Member

    Hello,
    thank you,

    I changed. mail.clicshopping.org by vps.clicshopping.eu.
    it seems better about the result but I do not receive the email.
    I let you the report from phpmail and I do not see any error inside.

    the result.
    If I send the email on [email protected]. I receive the email
    If I send an email to [email protected]. I do not receive the email
    If I send an email to Yahoo, I do not receive the email.

    tail -f /var/log/mail.log

    2024-08-05T13:47:40.932435+00:00 vps postfix/smtpd[2041]: connect from localhost[127.0.0.1]
    2024-08-05T13:47:41.064420+00:00 vps postfix/smtpd[2041]: 0F32E7E28F: client=localhost[127.0.0.1], sasl_method=LOGIN, [email protected]
    2024-08-05T13:47:41.116856+00:00 vps postfix/cleanup[5560]: 0F32E7E28F: message-id=<[email protected]>
    2024-08-05T13:47:41.169890+00:00 vps postfix/qmgr[1553]: 0F32E7E28F: from=<>, size=1670, nrcpt=1 (queue active)
    2024-08-05T13:47:41.172310+00:00 vps postfix/smtpd[2041]: disconnect from localhost[127.0.0.1] ehlo=2 starttls=1 auth=1 mail=1 rcpt=1 data=1 quit=1 commands=8
    2024-08-05T13:47:41.194339+00:00 vps postfix/smtp[5561]: warning: DNSSEC validation may be unavailable
    2024-08-05T13:47:41.194465+00:00 vps postfix/smtp[5561]: warning: reason: dnssec_probe 'ns:.' received a response that is not DNSSEC validated
    2024-08-05T13:47:41.529997+00:00 vps postfix/smtp[5561]: 0F32E7E28F: to=<[email protected]>, relay=mx-eu.mail.am0.yahoodns.net[188.125.72.73]:25, delay=0.54, delays=0.19/0.02/0.26/0.06, dsn=5.0.0, status=bounced (host mx-eu.mail.am0.yahoodns.net[188.125.72.73] said: 554 Message not accepted due to failed RFC compliance. From header address is empty. See https://senders.yahooinc.com/smtp-error-codes#rfc-compliance-failures (in reply to end of DATA command))
    2024-08-05T13:47:41.532235+00:00 vps postfix/qmgr[1553]: 0F32E7E28F: removed
    2024-08-05T13:47:43.750500+00:00 vps postfix/smtpd[3251]: connect from unknown[80.94.95.209]
    2024-08-05T13:47:44.358052+00:00 vps postfix/smtpd[1603]: warning: unknown[80.94.95.209]: SASL LOGIN authentication failed: Connection lost to authentication server, sasl_username=(unavailable)
    2024-08-05T13:47:45.076613+00:00 vps postfix/smtpd[1798]: warning: unknown[80.94.95.248]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
     

    Attached Files:

  4. till

    till Super Moderator Staff Member ISPConfig Developer

    You must set a from address in your PHP code when you want to send a message.
     
    ahrasis and Oitsuki like this.
  5. Oitsuki

    Oitsuki Member

    ah ok, maybe I have an error inside my code. I will look thank you.
     

Share This Page