Related Tips & Info

Cannot send mail to certain recipients. SMTP STARTTLS failure (8922)

Anders Gustafsson
1 Likes

Symptoms

Cannot mail certain recipients. The sender sees this in the GW Client:

 

 

 

The reason given for the delay: 420 TCP write error

 

 

 

The following is shown in the GWIA log:

 

 

 

07:11:54 2323 DMN: MSG 2815270 Attempting to connect to mail12.surftown.se 07:11:54 2323 DMN: MSG 2815270 Connected to [212.97.132.52] (mail12.surftown.se) 07:11:54 2323 DMN: MSG 2815270 SMTP STARTTLS failure (8922) 07:11:55 2323 DMN: MSG 2815270 SMTP session ended: [212.97.132.52] (mail12.surftown.se)

 

 

 

 

Diagnosis

The best way to troubleshoot this would be to get a packet trace. On the GWIA server:

 

 

 

tcpdump -i any -s 0 -w /root/surftown.cap host 212.97.132.52

 

 

 

This will capture data just for that ip. Note that you cannot filter on a single IP if the recipient has multiple ones.

Open the packet trace in Wireshark. Look at the client and server hellos:

Client Hello. That is you:

clipboard_image_0.png

You are indicating that you support TLS up to 1.2. Ideally the receiving mailserver should use that version, but instead:
 
clipboard_image_2.png
Here the receiving mailserver uses TLS 1.0 and that protocol is regarded as unsecure and was deprecated in June 2018. GW 18.2 will not talk to him.

Solution

Ask the admin of the receiving mailserver to upgrade to a supported version of SSL

Labels:

How To-Best Practice
Comment List
Parents

  • Hi,

    I see that GroupWise development is holier than Caesar’s wife. I upgraded to 18.2 and see what  ? Users started complaining, that they can not send emails, because of this great new super secure feature. 

    Internet is full of unpatched / old etc email servers , but users dont care, they need to send emails, very important emails, business emails . 

    If you so care about security, why there is no such function to downgrade to SSLv1 AND send email to postmaster , that his system is unsecure ? Or at least GroupWise system admin ?

    This is totally wrong ! I bet, that 99 % of admins , which upgrade to 18.2 will use TID 7024361 to make email work again.

     

     

    David

Comment

  • Hi,

    I see that GroupWise development is holier than Caesar’s wife. I upgraded to 18.2 and see what  ? Users started complaining, that they can not send emails, because of this great new super secure feature. 

    Internet is full of unpatched / old etc email servers , but users dont care, they need to send emails, very important emails, business emails . 

    If you so care about security, why there is no such function to downgrade to SSLv1 AND send email to postmaster , that his system is unsecure ? Or at least GroupWise system admin ?

    This is totally wrong ! I bet, that 99 % of admins , which upgrade to 18.2 will use TID 7024361 to make email work again.

     

     

    David

Children
No Data
Related
Recommended

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.