Tablo ripper ssl

Support & Troubleshooting
1

tablo ripper sendmail
I am getting an error message
sendmail failed the remote certificate is invalid according to the validation procedure
how do disable ssl
I am using a relay in my local LAN on port 25

2

Is the MTA STARTTLS capable?

3

yes, but it uses a self signed certificate

4

You probably have need to either get a root authorized chain in there or configure a plaintext port.

5

the MTA is a linux box running postfix , other apps sending mail I just deselect ssl

6

Try getting the MTAā€™s cert into the Windows cert store as trusted.

7

that sounds like a pain in the aaa, The linux box works well with comcast auth , I mostly use it for apps like this , security cam dvr , linux system mailā€¦

8

Forget about what happens at the MTA. The closed source Wiindows application (Tablo Ripper) has the restiction that you must overcome. Either Windows has to trust the certificate or you must figure out some other workaround; e.g., routing traffic Ripper -> sTunnel -> MTA

9

ok thanks for the reply

10

BTW, The linux box is configured to accept plain text on port 25, it then rewraps the headers and forwards to comcast server authenticated as me.

11

Put a sniifer on the wire and see exactly how the MTA advertises to the MUA (Ripper).

12

it just open no auth needed from any node on LAN at the command prompt .
just type "mail xxxx@wwww.net " hit send.

13

MAIL is available on Windows? Is not MAIL a Unix command.

14

Most people will translate that as appropriate

15

I would think the only differences is ripper is forcing ssl to use the DNS MX record
instead of just trusting the relay config

16

I guess one can alias the PS command. I do use PS. I do not use *NIX boxes, have not for decades (Sun).

17

I have several other windows apps my email relay works no problem
eg: https://www.softperfect.com/products/wifiguard/manual/

18

The MUA (Iā€™m sure; but closed sourceā€¦ ?) uses the Windows cert store and If the MTA advertises any SSL/TLS and there is a failure ā€œthe remote certificate is invalidā€, the MUA SHOULD abort. Iā€™m sure the simplest soultion is to do an ā€˜openssl s_client -connect mta:25 -showcertsā€™ and shove the chain into Windows as trusted.

19

Again, put a sniffer into mix and view the negotiations.

20

Also this client uses plaintext unless youā€™ve installed OpenSSL;maybe you have. View the captured packets for both applications.