ClearScada 2013 r1.2 Emailing Alerts SMTP server SSL rejection

[PCVisions]

Hi All

I am new to the group and apologize if I am asking a redundant question, but I have been unable to find a solution thus far.

I am running clearscada 2013 r1.2 on windows 7 and my email alerts have stopped sending because my email provider no longer support tls1.0.  The installation also uses stunnel, but I believe the configuration for email in clearscada bybasses stunnel through providing the usual credentials for smtp mail - IE username, password, server and outgoing port.  I think I got away with this issue for a while using ionos smtp servers as they were behind the times.

I hope someone has gone through this as its such a small issue and I am not sure of the easiest path

Thanks

Joe

[sbeadle]

Hi Joe,

sorry, everything about that installation is old (and insecure!). But you know that. Geo SCADA's email system now supports TLS 1.3.

Please urge it's owner to upgrade ClearSCADA to Geo SCADA AND upgrade Windows too.

Steve

[geoffpatton]

have you tried the latest version of stunnel and checked if it can set the TLS higher for you?

[PCVisions]

Thanks for the reply.  The reason this install was allowed to age was it is a monitor only scada system - there are no systems that can be adjusted.  So security (although always important) wasn't a major concern.  Just looking for an email alert to get through email tls 1.0 barrier.  Looks like update is solution long term.  Trying to get alerts running at the moment,  Can't find an email provider that allows tls 1.o.  I was lucky with 1and1.com thus far.

joe

[PCVisions]

Thanks for the reply.  Looking at newest version of stunnel looked a tad complicated.  I absolutely appreciate the suggestion as it's the most practice.  Do you know of a expert that I can pay to assist with configuration?

Thanks

Joe

[geoffpatton]

I do not know of anyone that has used the newest version of stunnel.

I think I have a customer still using stunnel and Gmail on a older version of ClearSCADA (still trying to get them to upgrade). They did have a problem awhile back and I don't know if they changed to an internal email address or got Gmail working again.

Another solution is you could buy a cheap domain name and setup your own email server.

We have a customer that has a small Linux system that only host their email server.

For them at the time it did eliminate the need for stunnel, but their reason was every email service that was tried would lock their account for a day or so from sending to many emails in a day or an hour. That really sucks when you have a big event and are trying to address everything and get no alerts for anything new.

[PCVisions]

Oh Boy Geoff - I liked the stunnel solution best because my 2013 version of clear scada is already set to send a tls 1.0 email out via stunnel.  The newest version supports current tls standards - I went through the documentation and part of the configuration says it wants you to purchase a ssl certificate.  Seems like the right path.  But your right with buying a domain and setting up an email server.  Its a possible solution for sure.  But I think its even more time that figuring out the new version of stunnel.

Joe