Re: [qmailtoaster] re: outgoing smtp settings

2012-06-30 Thread Ron Pacheco

  
  
Cecil,

Do you have the SSL certificate setup?

 http://wiki.qmailtoaster.com/index.php/Certificate

Not being able to connect using SSL or STARTTLS is often just a
problem with the certificate.

Ron

On 6/29/2012 11:56 PM, Maxwell Smart
  wrote:


  
  I am using the submission port 587. I just retired a server that
  was using the following smtp settings
  
  Connection SecuritySTARTTLS
  Authentication method   Password transmitted insecurely
  
  but those settings don't work on the new server which is using the
  following to get it to work.
  
  Connection SecurityNONE 
  Authentication method   Encrypted password
  
  Which is the correct setting?
  -- 




  



[qmailtoaster] Re: outgoing smtp settings

2012-06-30 Thread Eric Shubert

On 06/30/2012 06:15 AM, Ron Pacheco wrote:

Cecil,

Do you have the SSL certificate setup?

http://wiki.qmailtoaster.com/index.php/Certificate

Not being able to connect using SSL or STARTTLS is often just a problem
with the certificate.

Ron

On 6/29/2012 11:56 PM, Maxwell Smart wrote:

I am using the submission port 587. I just retired a server that was
using the following smtp settings

Connection Security STARTTLS
Authentication method Password transmitted insecurely

but those settings don't work on the new server which is using the
following to get it to work.

Connection Security NONE
Authentication method Encrypted password

Which is the correct setting?
--





The first setting is preferred, and will hopefully be required in the 
future. The entire message/session is encrypted, including the password, 
so the login/plain password setting is a little misleading when it says 
that the password is transmitted insecurely.


The cram-md5 authentication method (one of the encrypted password 
methods) will be removed from the stock QMT at some point in the future. 
It no longer serves a useful purpose (due to the advent of TLS), and 
requires that passwords be stored in plain text on the server, which is 
undesirable from a security standpoint.


--
-Eric 'shubes'


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



Re: [qmailtoaster] Re: outgoing smtp settings

2012-06-30 Thread Maxwell Smart

  
  

On 06/30/2012 09:11 AM, Eric Shubert
  wrote:

On
  06/30/2012 06:15 AM, Ron Pacheco wrote:
  
  Cecil,


Do you have the SSL certificate setup?


http://wiki.qmailtoaster.com/index.php/Certificate


Not being able to connect using SSL or STARTTLS is often just a
problem

with the certificate.


Ron


On 6/29/2012 11:56 PM, Maxwell Smart wrote:

I am using the submission port 587. I
  just retired a server that was
  
  using the following smtp settings
  
  
  Connection Security STARTTLS
  
  Authentication method Password transmitted insecurely
  
  
  but those settings don't work on the new server which is using
  the
  
  following to get it to work.
  
  
  Connection Security NONE
  
  Authentication method Encrypted password
  
  
  Which is the correct setting?
  
  --
  



  
  
  The first setting is preferred, and will hopefully be required in
  the future. The entire message/session is encrypted, including the
  password, so the login/plain password setting is a little
  misleading when it says that the password is transmitted
  insecurely.
  
  
  The cram-md5 authentication method (one of the encrypted password
  methods) will be removed from the stock QMT at some point in the
  future. It no longer serves a useful purpose (due to the advent of
  TLS), and requires that passwords be stored in plain text on the
  server, which is undesirable from a security standpoint.
  
  

Is there a write up on how to enable TLS? or quick instructions?
-- 
  


  



Re: [qmailtoaster] Re: outgoing smtp settings

2012-06-30 Thread Maxwell Smart

  
  

On 06/30/2012 09:11 AM, Eric Shubert
  wrote:

On
  06/30/2012 06:15 AM, Ron Pacheco wrote:
  
  Cecil,


Do you have the SSL certificate setup?


http://wiki.qmailtoaster.com/index.php/Certificate


Not being able to connect using SSL or STARTTLS is often just a
problem

with the certificate.


Ron


  

I re read the link you sent Ron and double checked ownership and
permissions and bingo. There was the problem. Made the cahnges and
now it works as expected.

Thanks all

CJ

  On 6/29/2012 11:56 PM, Maxwell Smart
wrote:

I am using the submission port 587. I
  just retired a server that was
  
  using the following smtp settings
  
  
  Connection Security STARTTLS
  
  Authentication method Password transmitted insecurely
  
  
  but those settings don't work on the new server which is using
  the
  
  following to get it to work.
  
  
  Connection Security NONE
  
  Authentication method Encrypted password
  
  
  Which is the correct setting?
  
  --
  



  
  
  The first setting is preferred, and will hopefully be required in
  the future. The entire message/session is encrypted, including the
  password, so the login/plain password setting is a little
  misleading when it says that the password is transmitted
  insecurely.
  
  
  The cram-md5 authentication method (one of the encrypted password
  methods) will be removed from the stock QMT at some point in the
  future. It no longer serves a useful purpose (due to the advent of
  TLS), and requires that passwords be stored in plain text on the
  server, which is undesirable from a security standpoint.
  
  


-- 
  


  



[qmailtoaster] re: outgoing smtp settings

2012-06-29 Thread Maxwell Smart

  
  
I am using the submission port 587. I just retired a server that
was using the following smtp settings

Connection SecuritySTARTTLS
Authentication method   Password transmitted insecurely

but those settings don't work on the new server which is using the
following to get it to work.

Connection SecurityNONE 
Authentication method   Encrypted password

Which is the correct setting?
--