Main Menu
All times are in GMT -8 (DST) :: The time is now 2:33 pm.
Sub Menu
Knowledgebase Sections
Article Data
- Article Ref
- 8884-WYUD-5726
- Written By
- Josh Olson
- Date Created
- Tue, 11th Aug 2015
- Updated By
- Josh Olson
- Date Modified
- Tue, 11th Aug 2015
Article Actions
Error: Error Code=TLS alert record received
Question
I have the ‘whenever possible’ option enabled in the ‘Settings | Mail | SMTP | Sending | Send Encrypted (SSL/TLS)’ section of the CommuniGate Pro web administration interface. When my server attempts to establish a secure connection to a remote SMTP server, I see a log entry similar to the following:
12:00:00.000 3 SMTP-001234(somehost.com) failed to establish a secure connection with [XX.XX.XX.XX]:25. Error Code=TLS alert record received
How can this be resolved?
Answer
We would suggest increasing the log level for TLS Sessions to 'All Info' on the 'Settings | General | Other' page of the CommuniGate Pro web administration interface. If there is another failure of this type, you will see more information related to TLS session itself and will be able to better understand what occurred.
Having said that, the most likely cause is that the server to which CGP is connecting requires a cipher that is not currently enabled. If you again take a look at the 'Settings | General | Other' page of the web administration interface, under the TLS Sessions section, you'll see the following two options (http://www.communigate.com/cgatepro/PKI.html#TLS):
1) CBC Ciphers for old TLS
2) Weak Ciphers
You could try enabling both (be sure to click update) and see if the problem continues.
We would still suggest, at least temporarily, increasing the TLS Sessions log level. Even if the connections to these hosts start to work after enabling the above options, it's probably best to know for sure which cipher is being used.
Article Comments
There are currently no comments.