Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > demon.ip.support.turnpike > #18596
| From | John Hall <john@jhall.co.uk> |
|---|---|
| Newsgroups | demon.ip.support.turnpike |
| Subject | Re: Problem sending e-mail via Zen |
| Date | 2026-04-11 10:44 +0100 |
| Message-ID | <n3ujgdFtpb4U1@mid.individual.net> (permalink) |
| References | (5 earlier) <4s0C4iH8221pFwSI@binnsroad.myzen.co.uk> <Ue6pUJIHg31pFwEa@binnsroad.myzen.co.uk> <leZc9EFBVU2pFwLY@b-howie.co.uk> <n3t1pdFmed0U1@mid.individual.net> <Ua9plcFW1g2pFwMi@binnsroad.myzen.co.uk> |
On 11/04/2026 09:59, Graeme wrote:
>
> Still trying to send mail, without success.
>
> Stunnel config File:
>
> [smtp]
> protocol = smtp
> client = yes
> accept = 127.0.0.1:25
> connect = mailhost.zen.co.uk:587
> verifyChain = yes
> CAfile = ca-certs.pem
> checkHost = mailhost.zen.co.uk
> OCSPaia = yes
>
> TP Log Window :
>
> Sat, 11 Apr 2026 09:56:29 SMTP[C5] Starting to send mail to [127.0.0.1]
> Sat, 11 Apr 2026 09:56:29 SMTP[C5] <- 220
> smarthost01a.ixn.mail.zen.net.uk ESMTP Exim 4.97 Ubuntu Sat, 11 Apr 2026
> 08:56:29 +0000
> Sat, 11 Apr 2026 09:56:29 SMTP[C5] -> EHLO binnsroad.myzen.co.uk
> Sat, 11 Apr 2026 09:56:29 Error on closing
> -- Winsock ERROR : Connection aborted
> Sat, 11 Apr 2026 09:56:29 Mail connection to [127.0.0.1] closed, 0
> messages transmitted
>
> Stunnel Log :
>
> 2026.04.11 09:57:09 LOG5[6]: Service [smtp] accepted connection from
> 127.0.0.1:55371
> 2026.04.11 09:57:09 LOG5[6]: s_connect: connected 212.23.1.11:587
> 2026.04.11 09:57:09 LOG5[6]: Service [smtp] connected remote server from
> 192.168.178.21:55372
> 2026.04.11 09:57:09 LOG5[6]: OCSP: Connecting the AIA responder "http://
> ocsp.usertrust.com"
> 2026.04.11 09:57:09 LOG5[6]: s_connect: connected 104.18.38.233:80
> 2026.04.11 09:57:09 LOG5[6]: OCSP: Certificate accepted
> 2026.04.11 09:57:09 LOG5[6]: OCSP: Connecting the AIA responder "http://
> ocsp.sectigo.com"
> 2026.04.11 09:57:09 LOG5[6]: s_connect: connected 104.18.38.233:80
> 2026.04.11 09:57:10 LOG5[6]: OCSP: Certificate accepted
> 2026.04.11 09:57:10 LOG5[6]: OCSP: Connecting the AIA responder "http://
> ocsp.sectigo.com"
> 2026.04.11 09:57:10 LOG5[6]: s_connect: connected 104.18.38.233:80
> 2026.04.11 09:57:10 LOG3[6]: OCSP: OCSP_basic_verify: 27069065:
> error:27069065:OCSP routines:OCSP_basic_verify:certificate verify error
> 2026.04.11 09:57:10 LOG4[6]: Rejected by OCSP at depth=0: CN=*.zen.co.uk
> 2026.04.11 09:57:10 LOG3[6]: SSL_connect: 14090086: error:14090086:SSL
> routines:ssl3_get_server_certificate:certificate verify failed
> 2026.04.11 09:57:10 LOG5[6]: Connection reset: 0 byte(s) sent to TLS, 0
> byte(s) sent to socket
>
> Way over my head :-(
>
It's rather over my head too!
The error seems to be shown up at this point in the stunnel log:
2026.04.11 09:57:10 LOG3[6]: OCSP: OCSP_basic_verify: 27069065:
error:27069065:OCSP routines:OCSP_basic_verify:certificate verify error
It's possible that it means that Zen have failed at register their mail
server with the ca-certs authority, so it's not found in the authority's
list, but I'm only guessing.
You could try commenting out these four lines, to see if it will then work:
verifyChain = yes
CAfile = ca-certs.pem
checkHost = mailhost.zen.co.uk
OCSPaia = yes
(You can do that by just inserting a semi-colon at the start of each line.)
--
John Hall
You can divide people into two categories:
those who divide people into two categories and those who don't
Back to demon.ip.support.turnpike | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Problem sending e-mail via Zen Graeme <News@nospam.demon.co.uk> - 2026-04-08 15:07 +0100
Re: Problem sending e-mail via Zen Graeme <News@nospam.demon.co.uk> - 2026-04-08 15:14 +0100
Re: Problem sending e-mail via Zen John Hall <john@jhall.co.uk> - 2026-04-08 16:47 +0100
Re: Problem sending e-mail via Zen Graeme <News@nospam.demon.co.uk> - 2026-04-08 18:17 +0100
Re: Problem sending e-mail via Zen John Hall <john@jhall.co.uk> - 2026-04-08 18:37 +0100
Re: Problem sending e-mail via Zen "J. P. Gilliver" <G6JPG@255soft.uk> - 2026-04-08 22:31 +0100
Re: Problem sending e-mail via Zen Graeme <News@nospam.demon.co.uk> - 2026-04-09 10:13 +0100
Re: Problem sending e-mail via Zen Graeme <News@nospam.demon.co.uk> - 2026-04-09 10:57 +0100
Re: Problem sending e-mail via Zen John Hall <john@jhall.co.uk> - 2026-04-09 17:02 +0100
Re: Problem sending e-mail via Zen brian <nospam@b-howie.co.uk> - 2026-04-10 19:45 +0100
Re: Problem sending e-mail via Zen John Hall <john@jhall.co.uk> - 2026-04-10 20:36 +0100
Re: Problem sending e-mail via Zen Graeme <News@nospam.demon.co.uk> - 2026-04-11 09:59 +0100
Re: Problem sending e-mail via Zen John Hall <john@jhall.co.uk> - 2026-04-11 10:44 +0100
Re: Problem sending e-mail via Zen Graeme <News@nospam.demon.co.uk> - 2026-04-11 11:20 +0100
Re: Problem sending e-mail via Zen John Hall <john@jhall.co.uk> - 2026-04-11 19:24 +0100
Re: Problem sending e-mail via Zen brian <nospam@b-howie.co.uk> - 2026-04-13 09:48 +0100
Re: Problem sending e-mail via Zen John Hall <john@jhall.co.uk> - 2026-04-13 10:38 +0100
Re: Problem sending e-mail via Zen brian <nospam@b-howie.co.uk> - 2026-04-13 12:41 +0100
Re: Problem sending e-mail via Zen John Hall <john@jhall.co.uk> - 2026-04-13 16:54 +0100
Re: Problem sending e-mail via Zen John Hall <john@jhall.co.uk> - 2026-04-09 11:04 +0100
Re: Problem sending e-mail via Zen "J. P. Gilliver" <G6JPG@255soft.uk> - 2026-04-09 17:50 +0100
Re: Problem sending e-mail via Zen John Hall <john@jhall.co.uk> - 2026-04-08 18:28 +0100
Re: Problem sending e-mail via Zen Graeme <News@nospam.demon.co.uk> - 2026-04-09 09:45 +0100
Re: Problem sending e-mail via Zen John Hall <john@jhall.co.uk> - 2026-04-09 10:54 +0100
csiph-web