Mail service code and/or documentation needs updating

[ahayes]

I have been trying to set up an atlas to use Google's SMTP mail server for authenticated outbound email from Nunaliit.

Nunaliit's Mail Service documentation suggests a solution for using GMail's SMTP server over SSL with a Gmail user and password. The configuration presented does not work and in trying to find a working configuration I first encountered this error:

• javax.net.ssl.SSLHandshakeException: No appropriate protocol (protocol is disabled or cipher suites are inappropriate) First thinking Java 8 might not have the cipher suites demanded by Google I tried upgrading to openjdk-11-jre-headless from openjdk-8-jre-headless with no change. Was able to get past this error in an undesirable way by commenting out the jdk.tls.disabledAlgorithms line in /etc/java-11-openjdk/security/java.security. I'm guessing we need some sort of update to our JavaMail code to have a matching secure cipher that Google supports.

After bypassing this problem I encountered other errors with connecting that seemed to be related to old examples or misconfigurations on my part based on SocketFactory and the various ports/config to enable SSL or STARTSSL.

Once I sorted those out, I got to this error which seems to indicate I either have incorrect credentials, my configuration is incorrect, or Google needs to be told to allow less secure sign-ins for the account I'm trying to use.

Mar 12 16:39:41 nunaliit nunaliit[10656]: com.sun.mail.smtp.SMTPSendFailedException: 530-5.7.0 Authentication Required. For more information, go to
Mar 12 16:39:41 nunaliit nunaliit[10656]: 530 5.7.0  https://support.google.com/mail/?p=WantAuthError c20-20020aa78814000000b006e625d2b5easm6444805pfo.47 - gsmtp

The JavaMail documentation has some specific sections on using Gmail that might be helpful.

Anyway, I think this needs some additional review, testing, and a revamp.

[ahayes]

Found Google's documentation of Ciphers for Gmail SMTP TLS connections