2.4.0-RELEASE: eMail Notifications Do Not Work

robi

@wolfsec:

@jimp:

…
If the server has an invalid or self-signed certificate, there is not currently a way to trust it for use with notifications. We're working on a fix there but it will not be available for a while yet.

any update onto this selgfsigned topic ?

Humm.
Somewhat overlooked that part.
Especially for servers and thus mail server (and pop, imap), there is no need to use non-trusted certs any more. They are there and free these days.
pfSense sends very well mails through my server because I use certs from "Let's Encrypt", which are globally trusted now.

I would say :a way to solve the issue is : ditch these self signed certs, and take some "real ones". Certs are not gadgets anymore, they are the bricks that pave the internet-road. Learn how to drive over them.

+1

If you use your own mail server, it's really up to you to use trusted certificates. pfSense can get trusted certificates for free using the Acme package, and it can automatically transfer them to your mail server as soon as the system gets them.

The Brave Sir Robin

Sending notification mail via Amazon AWS SES with the "Enable SMTP over SSL/TLS" set does not work. Clearing this setting does work.

email-smtp.eu-west-1.amazonaws.com port 587

It works but its far from ideal having to turn off TLS.

Grimson

@The:

It works but its far from ideal having to turn off TLS.

It's using StartTLS on port 587 by default, so not an issue.