I am getting the following error when trying to send an email
command="sendemail", [SSL: WRONGVERSIONNUMBER] wrong version number (_ssl.c:741) while sending mail to
using the command
index=internal | head 1 | sendemail to="my email" from="domain email" format="html" server=smtp-relay.gmail.com:587 usessl=1
How can I fix this error?
After applying the config change and adding
sslVersions = *,-ssl2
cipherSuite = TLSv1+HIGH:TLSv1.2+HIGH:@STRENGTH
Got rid of that error now getting
command="sendemail", [SSL: UNKNOWNPROTOCOL] unknown protocol (ssl.c:741)
Running the below command returns the following
sudo ./splunk/bin/splunk cmd openssl sclient -connect smtp-relay.gmail.com:587 | awk '/Protocol/ || /Cipher/ || /Verify/'
140005157344960:error:140770FC:SSL routines:SSL23GETSERVERHELLO:unknown protocol:s23_clnt.c:827:
New, (NONE), Cipher is (NONE)
Protocol : TLSv1.2
Cipher : 0000
Verify return code: 0 (ok)
The server has other applications successfully sending emails via the above mail server so I am missing something in the config.
Hm, this seems weird. Are you using a certificate of your own CA (or Let's Encrypt)? Can you test that certificate (validate) and check if it's in the correct format? If you can not connct wiht openssl to that server, it's the certificate.
It's not our certificate it's Google's certificate and as stated we have other applications installed (Jira, Confluence) that can successfully connect and send emails via the same mail server.
I am at a loss as well as I do not know why one application is working correctly and another is not. I may have to try a different mail server and see how I go.