[AP9630] SSL/TLS Email: Test e-mail failed; SMTP configuration error.

[Anonymous user]

I'm trying to configure my AP9630 I just got.  The SMTP server I'm using requires SSL/TLS (465 or 587) and authentication.  When I try sending a test email, I get an error: Test e-mail failed; SMTP configuration error.

Monitoring the log on my mail server, I can see the connection come in, but it doesn't do anything.  Enabling/Disabling authentication doesn't appear to have an effect, so it must be failing before authentication can occur.

I also tried playing with the Use SSL/TLS and Require CA Root Certificate settings, but nothing worked.

I upgraded the firmware to the latest: v6.0.6

Exim mail server log excerpt:

2013-08-01 19:40:57 SMTP connection from [x.x.x.x]:8097 (TCP/IP connection count = 1)

2013-08-01 19:41:07 TLS error on connection from [x.x.x.x]:8097 (SSL_accept): error:00000000:lib(0):func(0):reason(0)

2013-08-01 19:41:07 TLS client disconnected cleanly (rejected our certificate?)

Any ideas?  Please help.

[BillP]

Do you need an SSL cert for HTTPS access or SSL email authentication? Either way, we can branch this thread to something different if it does not have to do with the original posters topic.

Regardless, you need to use the APC Security Wizard to import your cert any which method you used to get a CA/SSL cert.

Using the security wizard and what is necessary is outlined here -> http://www.apcmedia.com/salestools/AKAR-7FVQ2W/AKAR-7FVQ2W_R1_EN.pdf

[Anonymous user]

I'm trying to configure my AP9630 I just got.  The SMTP server I'm using requires SSL/TLS (465 or 587) and authentication.  When I try sending a test email, I get an error: Test e-mail failed; SMTP configuration error.

Monitoring the log on my mail server, I can see the connection come in, but it doesn't do anything.  Enabling/Disabling authentication doesn't appear to have an effect, so it must be failing before authentication can occur.

I also tried playing with the Use SSL/TLS and Require CA Root Certificate settings, but nothing worked.

I upgraded the firmware to the latest: v6.0.6

Exim mail server log excerpt:

2013-08-01 19:40:57 SMTP connection from [x.x.x.x]:8097 (TCP/IP connection count = 1)

2013-08-01 19:41:07 TLS error on connection from [x.x.x.x]:8097 (SSL_accept): error:00000000:lib(0):func(0):reason(0)

2013-08-01 19:41:07 TLS client disconnected cleanly (rejected our certificate?)

Any ideas?  Please help.

[BillP]

Have you toggled between the three different authentication modes (implicit, always, if supported)? I see in the config.ini right now it is set to always. My guess is yes since you said you've played with the settings but I just want to double check.

*EDIT* I also forgot to ask if you have actually uploaded a certificate to the card for this purpose while playing with the settings as well.

[Anonymous user]

I have exactly the same problem with a AP9631. the server offers unencrypted (port 25) email, encrypted per SSL implicitly (port 465) and encrypted per StartTLS (port 587).

All of this works fine if I use a Lets Encrypt certificate on the SMTP server. The problem is, that I switched to my own internal CA. Hence the SMTP server provides its server certificate, and the server CA certificate and the root CA certificate to the AP9631. As long as the root CA certificate is unknown to the NMC it is clear that the SSL verification must fail. However, I successfully uploaded the root CA certificate (to be able to do that I renamed it from rootca.pem to rootca.crt) and it is regocgnized as valid by the NMC. I also enabled the use of the certificate (root ca cert required - yes).

Unfortunately it still does NOT work in the SSL implicit or StartTLS always mode, the only mode that works is unencrypted email so far.

It would be really useful to fix that.

And when they fix it they should also change the use of p15 certificate file format for the HTTPS vertificates. It is highly unusual and only the APC Wizard is able to produce them (a shame for people who do not use Windows). The APC products should be able to accept OpenSSL certificates right away without jumping to many hoops. Everything else is simpiy ridiculous in 2021.

[Anonymous user · Accepted solution]

In my case, NTP is working fine, the NMC time is perfect.

AP9631 Rev05

Application Module

Name

sumx

Version

v6.9.6

Date

Nov 6 2020

Time

11:08:39

APC OS (AOS)

Name

aos

Version

v6.9.6

Date

Nov 5 2020

Time

08:31:17

APC Boot Monitor

Name

bootmon

Version

v1.0.9

Date

Mar 27 2019

Time

16:23:06