Can not use mail server on SMTP

aaP_irbaaz2

connecting to SMTP with port 465 giving SSL_accept error and disconnecting.

I have changed the SSL path to : /www/server/panel/plugin/mail_sys/cert/135mailtest.com/privkey.pem,/www/server/panel/plugin/mail_sys/cert/135mailtest.com/fullchain.pem

and running this command : openssl s_client -connect mail.135mailtest.com:465 -starttls smtp

giving output : CONNECTED(00000005)

and nothing happens after this.

Running this command only : openssl s_client -connect mail.135mailtest.com:465
shows this error under certificate :
Verification error: unable to verify the first certificate

Under TLS 1.3 : Verify return code: 21 (unable to verify the first certificate)

Any help will be appreciated.

Thanks

aaP_irbaaz2

I have port 25 open and working fine, using round cube I can send and receive emails normally. Just can not use SMTP with third party app because of SSL error.

I have SSL installed already for my domain.

aaP_irbaaz2

The worst part is after removing SSL from panel and deleting files from path and requesting certificate again it is not asking to add TXT record to domain. it populates certificate itself. I have removed cloudflare API keys already before requesting new certificate.

On checking SSL on third party website it says hostname doesn't match.

Hostname is showing my panel DNS name instead of mail server name.

After disabling SSL for my panel, I can not request certificate for mail server it just shows popup than disappears nothing happens

aaPanel_Kern

Hello, would you like to replace 135mailtest.com with your own domain name?
Is it okay to try to deploy SSL by referring to this tutorial?
https://www.aapanel.com/docs/Function/Tutorial/Mail_SMTP_configuration.html

aaP_irbaaz2

Yes I have changed 135mailtest with my domain
Ok I will try the suggested tutorial and will update you

aaP_irbaaz2

above mentioned method didn't helped me as I am trying to sort this issue for Mail server in aapanel itself.

Running this command : openssl s_client -connect mail.mailhost.com:465 -starttls smtp

CONNECTED(00000003)
Didn't find STARTTLS in server response, trying anyway...

write:errno=32

no peer certificate available

No client certificate CA names sent

SSL handshake has read 0 bytes and written 23 bytes

Verification: OK

New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)

aaP_irbaaz2

issue I am facing is I am generating SSL certificate for my mailserver domain but when I test on third party website certificate is issued for My aapanel associated domain name not mailserver domain.

aaPanel_Kern

Hi, can you give us your aapanel information? The server makes a snapshot backup first, if possible, please send it to kern@aapanel.com.
It is recommended to fill in the following
Post link:
SSH IP address, account password and port:
aapanel login link address and account password:
Detailed problem description:

No post link will not be able to know which user's information is, and the problem will not be processed

aaP_irbaaz2

aaPanel_Kern Details emailed