topic Re: SSL Connect Error on SMTPS Settings in General Topics

SSL Connect Error on SMTPS Settings

DennyChanditya — Wed, 21 Sep 2022 08:10:55 GMT

We have problem with SMTPS configuration on Palo alto Firewall

so we have the SMTPS Certificate and already inject to the firewall

Our users says that the certificate is the certificate CA and when we test the email connection, the firewall shows error 'SSL Connect Error', we try on port 465 and using TLS 1.2

We have another brand network device, and the tac support on that brand said their device require the parameter 'extended key usage server authentication' in the certificate to setup the SMTPS.

Are in the palo alto firewall need this too in the certificate so we can config the SMTPS?

or is there any docs about how to troubleshoot the certificate like this?

Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.

Re: SSL Connect Error on SMTPS Settings

JayGolf — Wed, 21 Sep 2022 23:45:50 GMT

Hi @DennyChanditya ,

What type of email server do you use?

Re: SSL Connect Error on SMTPS Settings

DennyChanditya — Thu, 22 Sep 2022 04:39:06 GMT

i not familiar with the smtp/email servers type, how to identified that server type?

i only get the certificate file from our customer, they said it was the email server certificate CA.

i still search about certificate requirement for setup the SMTP over TLS.

Re: SSL Connect Error on SMTPS Settings

OtakarKlier — Thu, 22 Sep 2022 17:39:05 GMT

Hello,

Have you tried either of the following:

Try sending without TLS

Use port 25

Regards,

Re: SSL Connect Error on SMTPS Settings

DennyChanditya — Tue, 27 Sep 2022 04:18:43 GMT

Hello,

We've request open tac to troubleshoot this case, since our users not recommend to use smtp on port 25, so we should use the smtps instead. if the tac says it cannot use smtps so we go through with smtp.