Closed krono closed 1 year ago
I don't install Nextcloud on the same servers as Mailcow however I also had this issue and switched to using usr/sbin/sendmail
, however I expect this isn't a solution that will work in a Docker container.
Hi @krono We have https://github.com/mailcow/mailcow-dockerized/pull/5283 open, and it can fix it. I am still thinking about merging it, since it's internal network, no need to verify certs imho
I confirm that fixes it. I don't know what kind of user information would help during 25.x -> 26.x updates tho.
Feel free to close.
Contribution guidelines
I've found a bug and checked that ...
Description
Using the default install, Nextcloud 26 can no longer use mailcow for internal mails.
Trying to send mail results in an TLS Certificate error.
Details:
Nextcloud side:
Since version 26, Nextcloud uses symfony/mailer to deliver mail.
Symfony mailer seems to use StartTLS opportunistically, whenever the server advertises it regardless of what is chosen as encryption in the Nextcloud config UI
Symfony mailer treats any TLS-error as fatal, so any certificate error will result in mails not sent.
Integration script side:
smtp
(as opposed tosendmail
)domain
as${MAILCOW_HOSTNAME}
smtphost
aspostfix
smtpport
as588
Postfix side:
Error indication:
Since nextcloud tries to connect to
postfix
, but the cert presented does not have the bare name in its sANs, symfony errors and mails cannot be sent:Possible workaround (not yet tried):
${MAILCOW_HOSTNAME}
instead ofpostfix
(but this forfeits the usefullness of the internal network)Logs:
Steps to reproduce:
Which branch are you using?
master
Operating System:
Debian GNU/Linux 11 (bullseye)
Server/VM specifications:
12 GM RAM, 10 Cores
Is Apparmor, SELinux or similar active?
yes, apparmor
Virtualization technology:
KVM
Docker version:
24.0.2
docker-compose version or docker compose version:
v2.18.1
mailcow version:
2023-05a
Reverse proxy:
mailcow default (nginx)
Logs of git diff:
Logs of iptables -L -vn:
Logs of ip6tables -L -vn:
Logs of iptables -L -vn -t nat:
Logs of ip6tables -L -vn -t nat:
DNS check: