Roundcube Webmail SMTP Error

Roundcube Webmail SMTP Error

Unable to send message from Roundcube

SMTP Error (-1): Connection to server failed

Issue: Roundcube was not working as the letsencrypt ssl had expired , even after renewing SSL it was still not working.

Server OS: CentOS 6.1 and Plesk Onyx enabled

Plesk Reference KB: https://support.plesk.com/hc/en-us/articles/360002203634-Unable-to-send-message-from-Roundcube-SMTP-Error-1-Connection-to-server-failed

Observations: Even after renewing the SSL certificate was still showing as expired with the below command:
[root@tcgind ~]# echo | openssl s_client -connect mail.tcgind.com:465 -servername mail.tcgind.com 2>/dev/null | grep 'Verify return code'

Observations: on the maillog the following error was showing
warning: TLS library problem: error:14094415:SSL routines:ssl3_read_bytes:sslv3 alert certificate expired:../ssl/record/rec_layer_s3.c:1544:SSL alert number 45:

Resolution: Resolution was remove the following lines/certificate (should be on the bottom) from within the file /etc/postfix/postfix.pem and restart postfix
Reference Article: https://talk.plesk.com/threads/ssl3_read_bytes-sslv3-alert-certificate-expired.362343/

It is also recommended to move the hosted domains to a new CentOS version with latest Plesk enabled as the updated Letsencrypt SSL v3 ciphers are probably not supported on CentOS 6.x OS


-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----



    • Related Articles

    • Plesk services logs and configuration files

      Plesk services logs and configuration files Plesk Logs Error log: /var/log/sw-cp-server/error_log Access log: /var/log/plesk/httpsd_access_log Panel log: /var/log/plesk/panel.log Configuration PHP config on RHEL-based: ...

    • Process to delete all mails from Roundcube webmail

      1. Login to the Webmail with respective username and password. 2. Click on “Inbox” and pick “All” from the “Select” dropdown at bottom of the webmail after that click on “Delete” button.

    • Plesk compatibility mode for legacy option

      Plesk compatibility mode for legacy option (Separate SSL/TLS and non-SSL/TLS content) Problem: Opening the website with https shows a default placeholder page as given below: “This is the placeholder for domain <domain name>. If you see this page ...

    • Generate Paid SSL Certificate through Client Portal and Plesk

      Generate Paid SSL Certificate through Client Portal and Plesk To generate a certificate from Plesk we can click on generate a new certificate as per the steps below. If CSR is already generated, then go to Step 3. Step 1: For Generating the SSL ...

    • Generate Paid SSL Certificate through Client Portal and Plesk

      Generate Paid SSL Certificate through Client Portal and Plesk To generate a certificate from Plesk we can click on generate a new certificate as per the steps below. If CSR is already generated, then go to Step 3. Step 1: For Generating the SSL ...