XF 2.2 Amazon SES now shows errors for previously working configuration

[Mr Lucky]

I have gone back to Amazon SES after a couple of years. It was all fine before but now am getting error:

 Authenticator LOGIN returned Expected response code 235 but got code "535", with message "535 Authentication Credentials Invalid ".

This happens whether I use the previous credentials that were working or trying a new User.

Does anyone know what might be up here? Thanks

Both domain and sending email are verified.

 

[BassMan]

All works fine for me for years.

The obvious first, your SMTP credentials aren't the same as your AWS credentials: https://docs.aws.amazon.com/ses/latest/dg/smtp-credentials.html

Also, make sure you are in the right region.

 

[BassMan]

And my SMTP works on port 587 with TLS encryption.

 

[Mr Lucky]

Checked that. It is the credentials I get when in the SES section and click on SMTP credentials. It all looks right (although as confusing as hell)

There is a default username ses-smtp-user.20240703-132322 and that has an access key ID which I used as the SMTP user and a password aka Secret Access Key, both of which I copied from the CSV they send.

It was all working fine using those credentials couple of years back.

Yes TLS port 587, exactly asa it was back then when it was all working

 

[BassMan]

Maybe your host is blocking port 587.

 

[BassMan]

Or, try using SSL with port 465. Probably your host will need to allow port 465 first. (if you are with Matt. One of my clients had similar issue with the blocking port 465)

 

[MattW]

Maybe your host is blocking port 587.

No, port 587 is allowed, and multiple other customers are using SES on the same server.

 

[BassMan]

Thanks, Matt.

@Mr Lucky then maybe try with this:

try using SSL with port 465

Check: https://repost.aws/knowledge-center/ses-authentication-credentials-error

I am out of ideas for now, sorry.

 

[BassMan]

This might be useful too: https://stackoverflow.com/questions...edentials-invalid-trying-to-rotate-access-key

 

[Mr Lucky]

I've set up a test site on same domain and found that it is now working using the old credentials (on 587/TLS)

BUT

Out of five test emails only two had no errors, the other 3 had the error but still sent.

Will try again on live site

 

[MentaL]

Change port
Use diff api creds

 

[BassMan]

@Mr Lucky Have you solved this?

 

[Mr Lucky]

I've solved part. I was testing in xenForo an Mac mail it always used to work as sending server for Mac mail but not now - but then Mac mail is very very flaky.

One issue was the complication of switching regions. According to the docs you have to create new credentials from each region. That important piece of information exists in the docs on creating credentials , but when creating credentials the dashboard had switched regions - it seems to do that randomly and once you are in the credentials section it switches to "global" with no indication at all anywhere I can find to say which region you are in or which region the credentials apply to (because as soon as you check your credentials you are apparently global. So I'd say that bit was definitely user error but based on a very misleading interface.

Probably an edge case as I imagine not many people switch regions. Or maybe they do.

The other thing I was getting errors randomly, but test emails were getting sent. As soon as I saw errors I assumed nothing was sent so I wasn't actually checking receipt of the emails at the time.

 

[BassMan]

Thank you for this. Oh, I hear you about the regions with Amazon SES...