Mailing List CGatePro@mail.stalker.com Message #105665
From: <christoph.roethlisberger@iway.ch>
Subject: Re: TLS Validation
Date: Mon, 1 Jun 2015 17:02:05 +0200
To: CommuniGate Pro Discussions <CGatePro@mail.stalker.com>
Amazon most likely replaced their existing SSL certificate with a SHA256 signed cert (due to dropped support of SHA1 certs by Chrome and other Browsers) and your server is missing the root certificate for this new chain.

regards
Christoph R?thlisberger



Monday, June 1, 2015, 4:47:03 PM, you wrote:

> We use Amazon SES for outgoing SMTP and have been for several months. All of a sudden this error message starts showing up. From what I understand it as my CG server is rejecting Amazon?s certificate. I checked that this certificate is in the trusted list and it is.

> I have 2 very similar CGP installs and the one is working fine.

> Other things I have tried is re-installing the certificate on my end, as a work around I have forwarded outgoing email to the server that works with SES.

> I?ve been struggling with this for weeks and now am reaching out to the community for some help.




> 21:46:31.866 1 SMTP-000005(*) TLS certificate validation failed: presented certificate is issued by an unknown authority, issuer='VeriSign Class 3 Secure Server CA - G3'
> 21:46:31.866 2 TLS-000058 session closed by SMTP-000005, refCount=1
> 21:46:31.866 4 SMTP-000005(*) TLS aborting with code 10
> 21:46:32.068 3 SMTP-000005(*) failed to establish TLS connection with email-smtp.us-east-1.amazonaws.com:465. Error Code=peer certificate cannot be validated
> 21:46:32.068 4 SMTP-000005(*) closing connection



> Thank you,

> Hunter Chisholm
> Protean Solutions, LLC
> 216-785-2801
> proteansolutions.com


> #############################################################
> This message is sent to you because you are subscribed to
>   the mailing list <CGatePro@mail.stalker.com>.
> To unsubscribe, E-mail to: <CGatePro-off@mail.stalker.com>
> To switch to the DIGEST mode, E-mail to <CGatePro-digest@mail.stalker.com>
> To switch to the INDEX mode, E-mail to <CGatePro-index@mail.stalker.com>
> Send administrative queries to  <CGatePro-request@mail.stalker.com>

Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster