On 25.09.25 07:49, lejeczek via Postfix-users wrote:
I don't know what "exactly" with _ssl_ means for ceph - not
knowledgeable to comment on the source code and user manuals do not go
into those details or I failed to find such detailed info.
What I could find does not mention TLS at all. As far as CEPH's
configuration go, from user perspective:
-> $ ceph config set mgr mgr/alerts/smtp_ssl true
-> $ ceph config set mgr mgr/alerts/smtp_port 465
-> $ ceph alerts send
port 465 is supposed to be smtps alias submissions service, where implicit
SSL/TLS negotiation takes place.
Postfix's log:
Sep 25 07:43:00 postfix/smtpd[1825935]: improper command pipelining
after CONNECT from unknown[10.1.1.61]: \026\003\001\002\000\001\000\001\374\003\003\237\251\001\377\312a\302\026\177x\271E\350\0238\005\016\334\324m\026w\0024\2472r;%\355^\206 \031\317\037\034\022\035@9\032g\351=\254\350lm\331d\177\262O\314F\200>\000\005z\253\336\364\a\000F\023\002\023\003\023\001\023\004\300,\3000\314\251\314\250\300\255\300+\300/
and CEPH's
[SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:1147)
-> $ ceph config set mgr mgr/alerts/smtp_port 587
-> $ ceph alerts send
Postfix's
...
Sep 25 07:43:49 postfix/submission/smtpd[1819876]: improper command
pipelining after CONNECT from unknown[10.1.1.61]: \026\003\001\002\000\001\000\001\374\003\003\236\272\252-Z\017\025\200\325\336X\340V\265Jj\034\200\267\227K\253!\364\005\377l\232\225hP\031 ;\375\261\260\263\315\315\211)\300SK\210\2568\203(\303\336\246\343E\374)\307n\035\362\363m\b\b\000F\023\002\023\003\023\001\023\004\300,\3000\314\251\314\250\300\255\300+\300/
smtpd and submission/smtpd are (usually) run on ports 25/487 where explicit
SSL/TLS negotiation a.k.a STARTTLS takes place.
So, either ceph did not connect to port 465 or you have port 465 misconfigured
on your postfix.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Your mouse has moved. Windows NT will now restart for changes to take
to take effect. [OK]
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
