{"id":8857,"date":"2016-10-26T05:52:46","date_gmt":"2016-10-26T04:52:46","guid":{"rendered":"https:\/\/kb.okra.host\/article\/connection-to-mail-over-ssl-fails\/"},"modified":"2021-04-06T14:43:03","modified_gmt":"2021-04-06T13:43:03","slug":"connection-to-mail-over-ssl-fails","status":"publish","type":"ht_kb","link":"https:\/\/kb.okra.host\/de\/article\/connection-to-mail-over-ssl-fails\/","title":{"rendered":"Connection to mail over SSL fails"},"content":{"rendered":"<h2 id=\"overview\" >\u00dcbersicht<\/h2>\n<p>IMAP, POP3, and SSL that connect over SSL either via STARTTLS on port 143\/110\/587 or 993\/995\/465 respectively fail with a certificate warning without any symptoms prior to October 25, 2016. Symptoms include the following dialog from Thunderbird:<\/p>\n<div id=\"attachment_1375\" style=\"width: 310px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/kb.apiscp.com\/wp-content\/uploads\/2016\/10\/ssl-mismatch.png\" rel=\"lightbox-0\"><img decoding=\"async\" aria-describedby=\"caption-attachment-1375\" loading=\"lazy\" class=\"size-medium wp-image-1375\" src=\"https:\/\/kb.apiscp.com\/wp-content\/uploads\/2016\/10\/ssl-mismatch-300x300.png\" alt=\"SSL certificate rejection on initial connection\" width=\"300\" height=\"300\" \/><\/a><\/p>\n<p id=\"caption-attachment-1375\" class=\"wp-caption-text\">SSL certificate rejection on initial connection<\/p>\n<\/div>\n<div id=\"attachment_1376\" style=\"width: 296px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/kb.apiscp.com\/wp-content\/uploads\/2016\/10\/ssl-mismatch-x509.png\" rel=\"lightbox-1\"><img decoding=\"async\" aria-describedby=\"caption-attachment-1376\" loading=\"lazy\" class=\"size-medium wp-image-1376\" src=\"https:\/\/kb.okra.host\/wp-content\/uploads\/2016\/10\/fb_image-1.png\" alt=\"SSL certificate mismatch inspection after clicking &quot;View&quot; in the &quot;Add Security Exception&quot; dialog\" width=\"286\" height=\"300\" \/><\/a><\/p>\n<p id=\"caption-attachment-1376\" class=\"wp-caption-text\">SSL certificate mismatch inspection after clicking &#8220;View&#8221; in the &#8220;Add Security Exception&#8221; dialog<\/p>\n<\/div>\n<h2 id=\"cause\" >Ursache<\/h2>\n<p>With the proliferation of free SSL certificates via <a href=\"https:\/\/www.letsencrypt.org\">Let&#8217;s Encrypt<\/a>,\u00a0vendors have begun to tighten requirements on SSL certificate validation to thwart hackers. Thunderbird and Mail (iOS) now require that the\u00a0<strong>mail server name match a name in the Subject Alternative Name extension<\/strong>. Without such match the aforementioned warning is generated.<\/p>\n<h2 id=\"solution\" >L\u00f6sung<\/h2>\n<p>Change your mail server name, both incoming and outgoing, to <a href=\"https:\/\/kb.apiscp.com\/platform\/what-is-my-server-name\/\">match the server name<\/a> on which you are hosted. In the\u00a0initial example, &#8220;<em>mail.futz.net<\/em>&#8221; would be changed to &#8220;<em>luna.apnscp.com<\/em>&#8220;.<\/p>\n<h3 id=\"thunderbird\" >Thunderbird<\/h3>\n<p>See <a href=\"https:\/\/support.mozilla.org\/en-US\/kb\/manual-account-configuration\">KB: Manual Account Configuration<\/a><\/p>\n<h3 id=\"outlook\" >Outlook<\/h3>\n<p>See <a href=\"https:\/\/support.office.com\/en-us\/article\/Change-email-account-settings-58b62e89-6a9b-467b-8865-d5633fcacc3f\">KB: Change email account-settings<\/a><\/p>\n<h3 id=\"_\" ><\/h3>\n<h2 id=\"additional-notes\" >Additional Notes<\/h2>\n<p>This has been corrected in account provisioning as of October 26, 2016.<\/p>","protected":false},"excerpt":{"rendered":"<p>Overview IMAP, POP3, and SSL that connect over SSL either via STARTTLS on port 143\/110\/587 or 993\/995\/465 respectively fail with a certificate warning without any symptoms prior to October 25, 2016. Symptoms include the following dialog from Thunderbird: SSL certificate rejection on initial connection SSL certificate mismatch inspection after clicking&#8230;<\/p>","protected":false},"author":1,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"footnotes":""},"ht-kb-category":[58],"ht-kb-tag":[],"class_list":["post-8857","ht_kb","type-ht_kb","status-publish","format-standard","has-post-thumbnail","hentry","ht_kb_category-e-mail"],"_links":{"self":[{"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/ht-kb\/8857","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/comments?post=8857"}],"version-history":[{"count":2,"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/ht-kb\/8857\/revisions"}],"predecessor-version":[{"id":8861,"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/ht-kb\/8857\/revisions\/8861"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/media\/8859"}],"wp:attachment":[{"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/media?parent=8857"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/ht-kb-category?post=8857"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/ht-kb-tag?post=8857"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}