move hmailserver to a new server consideration

This section contains user-submitted tutorials.
Post Reply
Marc974
New user
New user
Posts: 1
Joined: 2017-10-16 11:47

move hmailserver to a new server consideration

Post by Marc974 » 2017-10-16 12:04

Just for information / or update migration documentation I solved issue on TLS/SSL handshake failed on external accounts :

If you want to move hmailserver to a new server

Since 1. The certificate validation is new to 5.5
and 2. You use SSL/TLS on external account (gmail, ...) :

https://www.hmailserver.com/documentati ... n_security
"The certificate is issued for a host name which matches the host name hMailServer connected to."

i think the doc about "Moving to a new server" here :https://www.hmailserver.com/documentati ... _newserver
should be completed by :
- You have to set up the same hostname on new server !


If not, we get TLS/SSL handshake failed :

Code: Select all

"DEBUG"	3336	"2017-10-16 10:31:21.825"	"Performing SSL/TLS handshake for session 8193. Verify certificate: True, Expected remote host name: pop.gmail.com"
"DEBUG"	1716	"2017-10-16 10:31:22.061"	"Certificate verification failed for session 8193. Expected host: pop.gmail.com, Windows error code: -2146762487, Windows error message: Une chaîne de certificats a été traitée mais s
"TCPIP"	1716	"2017-10-16 10:31:22.062"	"TCPConnection - TLS/SSL handshake failed. Session Id: 8193, Remote IP: 74.125.206.109, Error code: 336134278, Message: certificate verify failed"
"DEBUG"	1716	"2017-10-16 10:31:22.063"	"Ending session 8193"
Fixed when i changed the window's new server hostname by the old one.

User avatar
mattg
Moderator
Moderator
Posts: 20000
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: move hmailserver to a new server consideration

Post by mattg » 2017-10-16 23:43

Marc974 wrote:i think the doc about "Moving to a new server" here :https://www.hmailserver.com/documentati ... _newserver
should be completed by :
- You have to set up the same hostname on new server !
I don't think that this is correct...
Marc974 wrote:https://www.hmailserver.com/documentati ... n_security
"The certificate is issued for a host name which matches the host name hMailServer connected to.
#1 - That page is superseded by https://www.hmailserver.com/documentati ... nce_ssltls (Help button should take you to this page)
#2 - This statement is about the server name at the other end of the conversation, not your hMailserver name
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

Post Reply