Author Message
soliman
Joined: Feb 12, 2018
Messages: 27
Offline
I am attempting to send mail (unauthenticated SMTP ) through an internal mail server over port 25. we did a packet capture and breeze attempts to perform TLS. Is there any additional configuration needed to disable TLS. The connector logs show the following error message
2018-12-24 12:21:30,224 [WorkManager.WebSphere_EJB_Container_AsynchMethods_Internal_WorkManager : 0] EmailConnector FINE - EmailConnector-3.4.0.0.340003 - EMAIL AUDIT: could not connect to [address=internalMail.testlab.org, smtps=false]
2018-12-24 12:21:30,224 [WorkManager.WebSphere_EJB_Container_AsynchMethods_Internal_WorkManager : 0] EmailConnector FINEST - EmailConnector-3.4.0.0.340003 - getConnection: on exit, pool size = 0
2018-12-24 12:21:30,225 [WorkManager.WebSphere_EJB_Container_AsynchMethods_Internal_WorkManager : 0] EmailConnector INFO - EmailConnector-3.4.0.0.340003 - EmailConnector(3.4.0.0.340003) - no host or not connected, returning request to outbox
2018-12-24 12:21:30,225 [WorkManager.WebSphere_EJB_Container_AsynchMethods_Internal_WorkManager : 0] EmailConnector FINEST - EmailConnector-3.4.0.0.340003 - returnConnection: after connection was returned, pool size = 1
2018-12-24 12:21:30,225 [WorkManager.WebSphere_EJB_Container_AsynchMethods_Internal_WorkManager : 0] EmailConnector FINER - EmailConnector-3.4.0.0.340003 - EmailConnector(3.4.0.0.340003) - drainOutbox: EXIT
2018-12-24 12:21:30,230 [WorkManager.WebSphere_EJB_Container_AsynchMethods_Internal_WorkManager : 6] EmailConnector FINEST - EmailConnector-3.4.0.0.340003 - returnConnection: after connection was returned, pool size = 2
2018-12-24 12:21:30,230 [WorkManager.WebSphere_EJB_Container_AsynchMethods_Internal_WorkManager : 6] EmailConnector FINER - EmailConnector-3.4.0.0.340003 - EmailConnector(3.4.0.0.340003) - drainOutbox: EXIT
2018-12-24 12:21:30,232 [WorkManager.WebSphere_EJB_Container_AsynchMethods_Internal_WorkManager : 8] EmailConnector WARN - EmailConnector-3.4.0.0.340003 - connect: could not connect to [address=internalMail.testlab.org, smtps=false]
javax.mail.MessagingException: Can't send command to SMTP host;
nested exception is:
javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target
at com.sun.mail.smtp.SMTPTransport.sendCommand(SMTPTransport.java:1717)
at com.sun.mail.smtp.SMTPTransport.sendCommand(SMTPTransport.java:1704)
at com.sun.mail.smtp.SMTPTransport.ehlo(SMTPTransport.java:1088)
at com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:468)
at javax.mail.Service.connect(Service.java:291)
at javax.mail.Service.connect(Service.java:172)
at com.avaya.zephyr.services.emailconnector.hosts.EmailHost.connect(EmailHost.java:160)
at com.avaya.zephyr.services.emailconnector.connectionpool.ConnectionPool.getConnection(ConnectionPool.java:78)
at com.avaya.zephyr.services.emailconnector.OutboxDrainer.drainOutbox(OutboxDrainer.java:54)
at sun.reflect.GeneratedMethodAccessor321.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:508)
at com.ibm.ejs.container.AsyncMethodWorkWrapper.run(AsyncMethodWorkWrapper.java:234)
at com.ibm.ws.asynchbeans.J2EEContext.run(J2EEContext.java:811)
at com.ibm.ws.asynchbeans.WorkWithExecutionContextImpl.go(WorkWithExecutionContextImpl.java:222)
at com.ibm.ws.asynchbeans.ABWorkItemImpl.run(ABWorkItemImpl.java:206)
at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1892)
Caused by: javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target
at com.ibm.jsse2.j.a(j.java:31)
at com.ibm.jsse2.as.a(as.java:262)
at com.ibm.jsse2.C.a(C.java:515)
at com.ibm.jsse2.C.a(C.java:11)
at com.ibm.jsse2.D.a(D.java:720)
at com.ibm.jsse2.D.a(D.java:635)
at com.ibm.jsse2.C.r(C.java:44)
at com.ibm.jsse2.C.a(C.java:184)
at com.ibm.jsse2.as.a(as.java:481)
at com.ibm.jsse2.as.i(as.java:130)
at com.ibm.jsse2.as.a(as.java:497)
at com.ibm.jsse2.h.write(h.java:23)
at com.sun.mail.util.TraceOutputStream.write(TraceOutputStream.java:110)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:93)
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:151)
at com.sun.mail.smtp.SMTPTransport.sendCommand(SMTPTransport.java:1715)
... 16 more
Caused by: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target
at com.ibm.jsse2.util.f.a(f.java:21)
at com.ibm.jsse2.util.f.b(f.java:51)
at com.ibm.jsse2.util.e.a(e.java:19)
at com.ibm.jsse2.aA.a(aA.java:204)
at com.ibm.jsse2.aA.a(aA.java:160)
at com.ibm.jsse2.aA.checkServerTrusted(aA.java:207)
at com.ibm.jsse2.D.a(D.java:67)
... 27 more
Caused by: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target
at com.ibm.security.cert.PKIXCertPathBuilderImpl.buildCertPath(PKIXCertPathBuilderImpl.java:654)
at com.ibm.security.cert.PKIXCertPathBuilderImpl.engineBuild(PKIXCertPathBuilderImpl.java:368)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
at com.ibm.jsse2.util.f.a(f.java:153)
... 33 more
2018-12-24 12:21:30,233 [WorkManager.WebSphere_EJB_Container_AsynchMethods_Internal_WorkManager : 8] EmailConnector FINE - EmailConnector-3.4.0.0.340003 - EMAIL AUDIT: could not connect to [address=internalMail.testlab.org, smtps=false]
2018-12-24 12:21:30,233 [WorkManager.WebSphere_EJB_Container_AsynchMethods_Internal_WorkManager : 8] EmailConnector FINE - EmailConnector-3.4.0.0.340003 - clear: disconnect connection [address=internalMail.testlab.org, smtps=false]
2018-12-24 12:21:30,233 [WorkManager.WebSphere_EJB_Container_AsynchMethods_Internal_WorkManager : 8] EmailConnector FINE - EmailConnector-3.4.0.0.340003 - clear: disconnect connection [address=internalMail.testlab.org, smtps=false]
2018-12-24 12:21:30,233 [WorkManager.WebSphere_EJB_Container_AsynchMethods_Internal_WorkManager : 8] EmailConnector FINEST - EmailConnector-3.4.0.0.340003 - getConnection: on exit, pool size = 0
2018-12-24 12:21:30,234 [WorkManager.WebSphere_EJB_Container_AsynchMethods_Internal_WorkManager : 3] EmailConnector WARN - EmailConnector-3.4.0.0.340003 - connect: could not connect to [address=internalMail.testlab.org, smtps=false]
javax.mail.MessagingException: Can't send command to SMTP host;
nested exception is:
javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target
at com.sun.mail.smtp.SMTPTransport.sendCommand(SMTPTransport.java:1717)
at com.sun.mail.smtp.SMTPTransport.sendCommand(SMTPTransport.java:1704)
at com.sun.mail.smtp.SMTPTransport.ehlo(SMTPTransport.java:1088)
at com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:468)
at javax.mail.Service.connect(Service.java:291)
at javax.mail.Service.connect(Service.java:172)
at com.avaya.zephyr.services.emailconnector.hosts.EmailHost.connect(EmailHost.java:160)
at com.avaya.zephyr.services.emailconnector.connectionpool.ConnectionPool.getConnection(ConnectionPool.java:78)
at com.avaya.zephyr.services.emailconnector.OutboxDrainer.drainOutbox(OutboxDrainer.java:54)
at sun.reflect.GeneratedMethodAccessor321.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:508)
at com.ibm.ejs.container.AsyncMethodWorkWrapper.run(AsyncMethodWorkWrapper.java:234)
at com.ibm.ws.asynchbeans.J2EEContext.run(J2EEContext.java:811)
at com.ibm.ws.asynchbeans.WorkWithExecutionContextImpl.go(WorkWithExecutionContextImpl.java:222)
at com.ibm.ws.asynchbeans.ABWorkItemImpl.run(ABWorkItemImpl.java:206)
at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1892)
Caused by: javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target
at com.ibm.jsse2.j.a(j.java:31)
at com.ibm.jsse2.as.a(as.java:262)
at com.ibm.jsse2.C.a(C.java:515)
at com.ibm.jsse2.C.a(C.java:11)
at com.ibm.jsse2.D.a(D.java:720)
at com.ibm.jsse2.D.a(D.java:635)
at com.ibm.jsse2.C.r(C.java:44)
at com.ibm.jsse2.C.a(C.java:184)
at com.ibm.jsse2.as.a(as.java:481)
at com.ibm.jsse2.as.i(as.java:130)
at com.ibm.jsse2.as.a(as.java:497)
at com.ibm.jsse2.h.write(h.java:23)
at com.sun.mail.util.TraceOutputStream.write(TraceOutputStream.java:110)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:93)
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:151)
at com.sun.mail.smtp.SMTPTransport.sendCommand(SMTPTransport.java:1715)
... 16 more
Caused by: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target
at com.ibm.jsse2.util.f.a(f.java:21)
at com.ibm.jsse2.util.f.b(f.java:51)
at com.ibm.jsse2.util.e.a(e.java:19)
at com.ibm.jsse2.aA.a(aA.java:204)
at com.ibm.jsse2.aA.a(aA.java:160)
at com.ibm.jsse2.aA.checkServerTrusted(aA.java:207)
at com.ibm.jsse2.D.a(D.java:67)
... 27 more
Caused by: java.security.cert.CertPathBuilderException: unable to find valid certification path to requested target
at com.ibm.security.cert.PKIXCertPathBuilderImpl.buildCertPath(PKIXCertPathBuilderImpl.java:654)
at com.ibm.security.cert.PKIXCertPathBuilderImpl.engineBuild(PKIXCertPathBuilderImpl.java:368)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
at com.ibm.jsse2.util.f.a(f.java:153)
... 33 more
JoelEzell
Joined: Nov 15, 2013
Messages: 780
Offline
Sorry for the delayed response. Breeze cannot control whether TLS is used; this is a configuration on the email server. It looks like the certificate being presented by the email server isn't trusted by Breeze. Do you have the certificate for the CA that signed the email server certificate? If so, you can provision this as a trusted certificate as described in our admin guide. You could alternatively provision the certificate for the email server itself as trusted. Depending on the version of Breeze you may have to restart Breeze after doing this.
Go to:   
Mobile view