SMTP Error in XenForo 2.3.3

[lanbin]

Affected version

2.3.3

Symfony\Component\Mailer\Exception\TransportException: Email to test-0p59lv57x@srv1.mail-tester.com from support@example.com failed: Connection could not be established with host "ssl://smtp.protonmail.ch:587": stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages: error:0A00010B:SSL routines::wrong version number src/vendor/symfony/mailer/Transport/Smtp/Stream/SocketStream.php:154




#0 [internal function]: Symfony\Component\Mailer\Transport\Smtp\Stream\SocketStream->Symfony\Component\Mailer\Transport\Smtp\Stream\{closure}(2, 'stream_socket_c...', '/srv/users/ex...', 157)
#1 src/vendor/symfony/mailer/Transport/Smtp/Stream/SocketStream.php(157): stream_socket_client('ssl://smtp.prot...', 0, '', 60, 4, Resource id #165)
#2 src/vendor/symfony/mailer/Transport/Smtp/SmtpTransport.php(251): Symfony\Component\Mailer\Transport\Smtp\Stream\SocketStream->initialize()
#3 src/vendor/symfony/mailer/Transport/Smtp/SmtpTransport.php(194): Symfony\Component\Mailer\Transport\Smtp\SmtpTransport->start()
#4 src/vendor/symfony/mailer/Transport/AbstractTransport.php(72): Symfony\Component\Mailer\Transport\Smtp\SmtpTransport->doSend(Object(Symfony\Component\Mailer\SentMessage))
#5 src/vendor/symfony/mailer/Transport/Smtp/SmtpTransport.php(136): Symfony\Component\Mailer\Transport\AbstractTransport->send(Object(Symfony\Component\Mailer\SentMessage), Object(Symfony\Component\Mailer\DelayedEnvelope))
#6 src/XF/Mail/Mailer.php(305): Symfony\Component\Mailer\Transport\Smtp\SmtpTransport->send(Object(Symfony\Component\Mime\Email))
#7 src/XF/Mail/Mail.php(576): XF\Mail\Mailer->send(Object(Symfony\Component\Mime\Email), Object(Symfony\Component\Mailer\Transport\Smtp\EsmtpTransport))
#8 src/XF/Admin/Controller/ToolsController.php(310): XF\Mail\Mail->send(Object(Symfony\Component\Mailer\Transport\Smtp\EsmtpTransport), false)
#9 src/XF/Mvc/Dispatcher.php(362): XF\Admin\Controller\ToolsController->actionTestEmail(Object(XF\Mvc\ParameterBag))
#10 src/XF/Mvc/Dispatcher.php(264): XF\Mvc\Dispatcher->dispatchClass('XF:Tools', 'TestEmail', Object(XF\Mvc\RouteMatch), Object(XF\Admin\Controller\ToolsController), NULL)
#11 src/XF/Mvc/Dispatcher.php(121): XF\Mvc\Dispatcher->dispatchFromMatch(Object(XF\Mvc\RouteMatch), Object(XF\Admin\Controller\ToolsController), NULL)
#12 src/XF/Mvc/Dispatcher.php(63): XF\Mvc\Dispatcher->dispatchLoop(Object(XF\Mvc\RouteMatch))
#13 src/XF/App.php(2826): XF\Mvc\Dispatcher->run()
#14 src/XF.php(806): XF\App->run()
#15 admin.php(15): XF::runApp('XF\\Admin\\App')
#16 {main}


array(4) {
  ["url"] => string(27) "/admin.php?tools/test-email"
  ["referrer"] => string(49) "https://example.com/admin.php?tools/test-email"
  ["_GET"] => array(1) {
    ["tools/test-email"] => string(0) ""
  }
  ["_POST"] => array(2) {
    ["_xfToken"] => string(8) "********"
    ["email"] => string(35) "test-0p59lv57x@srv1.mail-tester.com"
  }
}

Hello, I'm encountering an SMTP error in XenForo 2.3.3. This issue doesn't occur in version 2.2.*.

 

[Sebastiaan]

Use a real emailaddress instead of support@example.com

 

[lanbin]

Use a real emailaddress instead of support@example.com

In the forum settings, a real email address is set, but I replaced it with example.com in the error.

 

[lanbin]

XF 2.3 https://xenforo.com/community/threads/email-to-from-failed.223275/

 

[Sebastiaan]

Are you on a private VPS? Make sure everything is updated on the server side. Maybe your OpenSSL version is outdated.

 

[lanbin]

I have everything perfectly set up with the server; I always keep everything updated. There are no issues on the second forum, which is currently on XenForo 2.2.* The problem is exclusively with XenForo 2.3.*

 

[Mr. Jinx]

If I remember correctly there were some changes in XF 2.3 regarding SSL/TLS and StartTLS
Try to disable SSL/TLS and see if it works. It will automatically switch back to StartTLS.

If you want to force SSL/TLS, you might have to use a different port if your provider supports it.

 

[lanbin]

If I remember correctly there were some changes in XF 2.3 regarding SSL/TLS and StartTLS
Try to disable SSL/TLS and see if it works. It will automatically switch back to StartTLS.

If you want to force SSL/TLS, you might have to use a different port if your provider supports it.

587

 

[Mr. Jinx]

Some providers support port 465 but I don't think Proton has it.
You need to disable SSL/TLS in Xenforo.
It will use StartTLS which is fine.

 

[Kirby]

You need to disable SSL/TLS in Xenforo.
It will might use StartTLS which is fine as long as no attacker can redirect traffic.

K

Thread 'Can't force STARTTLS for SMTP server'

Oct 1, 2024

With XenForo < 2.3 it was possible to configure a SMTP server as

• Plaintext
• TLS (=STARTTLS. eg. initial plaintext connection taht is switchted to TLS aver STARTTLS command)
• SSL (=implicit TLS, eg. the entirate connection is TLS)

With XenForo 2.3 the configuration options have been changed to


Right now it is only possible to enable checkbox Use SSL/TLS which implicity uses TLS or leave it disabled which will use STARTTLS if supported by the server or Plaintext if not.

So if I am right this somewhat opens up a vector for a man-in-the-middle attack:
If...

• Kirby
• Replies: 0
• Forum: Bug reports