Configuring phabricator outbound email

AmazingTrans 2018-04-05 22:05:50 UTC #1

Keywords: Phabricator - Virtual Machines - How to - Email configuration (SMTP)
Description:
I used to be able to configure a customer email in the older phabricator /phabricator/htdocs/conf/custom/PhabricatorMail.conf.php.

After I have updated the Phabricator, it seems the /htdocs/conf doesn’t have the custom folder anymore.
I look for help in here https://secure.phabricator.com/book/phabricator/article/configuring_outbound_email/
and this time the new version requires us to list it in the cluster mailers. What file do i edit, or change in so i can specify my configuration below?

How can i configure the mailing such that today i use the following?

<?php 
return array(
 'phpmailer.smtp-host' => '10.10.5.1', 
'phpmailer.smtp-port' => 30);

michiel 2018-04-06 11:24:36 UTC #2

Hi @AmazingTrans,

You can find information about configuring outbound mail in Bitnami Phabricator in the following section of our docs:

https://docs.bitnami.com/virtual-machine/apps/phabricator/#how-to-configure-outbound-email-settings

Regards,

Michiel D'Hont

Please, click on if you think my answer was helpful

AmazingTrans 2018-04-06 13:42:56 UTC #3

Okay, i checked the phpmailer, and the information is there from my old phabricator which i have imported.
Question now come to why are the mail stuck.
I've checked the host & port, they are the same as before. I am able to ping the addresses as well.
1. Do i have enable php mail in the php?
2. Is there anyway i can do a test mail to make sure the bitnami phabricator package has mail install?
3. Other opinions?

metamta.mail-adapter => PhabricatorMailImplementationPHPMailerAdapter
phpmailer.mailer => "smtp"
phpmailer.smtp-host =>  "10.10.5.1""
phpmailer.smtp-port => 25
phpmailer.smtp-protocol => "tls"
phpmailer.smtp-user => null
phpmailer.smtp-password => "base64"

AmazingTrans 2018-04-06 21:31:09 UTC #4

Do i have to install PHPMailer to get it working?

AmazingTrans 2018-04-06 22:03:08 UTC #5

I just re-read this phrase multiple time.
At the end of the sentences, it says "This option is deprecated in favor of ‘cluster.mailers’.
So, i guess we shouldn’t be using this option “metamta.mail-adapter” anymore, and configure it in the cluster.mailers configuration file?

Adapter class to use to transmit mail to the MTA. The default uses PHPMailerLite, which will invoke “sendmail”. This is appropriate if sendmail actually works on your host, but if you haven’t configured mail it may not be so great. A number of other mailers are available (e.g., SES, SendGrid, SMTP, custom mailers). This option is deprecated in favor of ‘cluster.mailers’.

Now question is where do i setup cluster mailer configuration file? Here is a link, and maybe someone who has experience with linux / php might understand where i should put the parameters?
https://secure.phabricator.com/book/phabricator/article/configuring_outbound_email/

Outbound email is not working

AmazingTrans 2018-04-06 23:30:46 UTC #6

Here are some notes on logic change https://secure.phabricator.com/D19004 in regards to the cluster.mailers.
my files are the same update as what they have there.

I have decided to disable sethidden parameter to false in the following file: PhabricatorMetaMTAConfigOptions.php, and configure it in the phabricator with the following:

[
  {
    “key”:“Test-Mailer”,
    “type”: “smtp”,
    “options”: {
      “host”: “10.10.5.1”,
      “post”: 25,
      “protocol” : “tls”
    }
  }
]

The UI accepted the following json.
Reboot the machine, and still not working.
The mails are still pending in queue.

I have cluster.mail setup. I have the mta setup as well.
What else is missing?

Can somebody in Bitnami test it out using the latest phabricator VM. It would be a great help if you can simulate a SMTP test and let us know if it works.

michiel 2018-04-09 08:10:49 UTC #7

Hi @AmazingTrans,

We have a Support Tool that will gather relevant information for us to debug the issue. It includes a SMTP health check tool. Could you please download and execute it on the machine where the stack is running by following the steps described in the guide below? You must click on the platform or cloud that you are using to find the correct instructions.

How to Run the Bitnami Support Tool

Please note that you need to paste the code outputted by the tool in your reply.

Regards,

Michiel D'Hont

AmazingTrans 2018-04-09 12:42:02 UTC #8

Michiel,
Here it is: f4438134-2f29-162f-9da1-e6f48b7e6c96

michiel 2018-04-10 09:57:01 UTC #9

Hi @AmazingTrans,

Did you encounter any difficulties executing the SMTP health check tool included in the bnsupport tool? Could you execute these commands inside your instance (connect through SSH) to download the tool:

wget https://github.com/bitnami-labs/healthcheck-tools/releases/download/2.0.0/smtp-checker-v2.0.0-linux-amd64
chmod +x smtp-checker-v2.0.0-linux-amd64

Since your application is not supported yet, please find out your SMTP settings and run the command:

./smtp-checker-v2.0.0-linux-amd64 -smtp_host YOUR_SMTP_HOST -smtp_port YOUR_SMTP_PORT -smtp_user YOUR_SMTP_USER -smtp_password YOUR_SMTP_PASS -mail_recipient YOUR_MAIL_ACCOUNT

In this way you can check if a test email has been sent to your mail account.

Please paste the results of executing the commands.

Regards,
Michiel

AmazingTrans 2018-04-10 12:17:22 UTC #10

Michiel,

======================================
SMTP CHECKS
======================================
Using SMTP credentials:
  - SMTP Host: "10.10.5.1"
  - SMTP Port: 25
  - SMTP User: "abc@company.com"
  - SMTP Password: "password"
  - Mail Recipient: "abc@company.com"

-- Check: Connectivity with SMTP server --
Succesful connectivity!
-- Check: server time offset --
Time synchronisation of host debian within reasonable bounds!
-- Check: Send mail via SMTP --

Note: Remember to check the recipient's mail inbox!

======================================
SMTP CHECKS FINISHED
======================================

2018/04/10 12:15:27 Found errors when checking the SMTP configuration:
x509: cannot validate certificate for 10.10.5.1 because it doesn't contain any IP SANs

michiel 2018-04-11 15:03:20 UTC #11

Hi @AmazingTrans,

The issue seems to be caused by the host (10.10.5.1) not having a valid SSL certificate.

Please check the following thread for more information about this issue.

https://serverfault.com/questions/611120/failed-tls-handshake-does-not-contain-any-ip-sans#answer-611121

Regards,
Michiel

Please, click on if you think my answer was helpful

AmazingTrans 2018-04-11 16:16:58 UTC #12

Michiel,we are using TLS protocol, not the ssl. ideas what to do there?
The phabricator phpmailer settings is set to: phpmailer.smtp-protocol => "tls"

AmazingTrans 2018-04-11 22:18:38 UTC #13

Additional Note:
I am only using the mail server to send mail, not receiving at all.
I have a bitnami mediawiki stacks which has the mailing working and communicating to the same server.
Also, before i did the upgrade of phab 3 weeks ago, the mailing was also working on the old stack too.

Is there maybe any settings i have to set on the php config end for mailing?

crhernandez 2018-04-13 10:03:04 UTC #14

Hi,

Can you take a look to /etc/ssl/openssl.cnf? You can open it using a text editor. On this file you can look for a section like the following:

# This stuff is for subjectAltName and issuerAltname.
# Import the email address.
# subjectAltName=email:copy
# An alternative to produce certificates that aren't
# deprecated according to PKIX.
# subjectAltName=email:move

Can you try adding

subjectAltName = IP:10.10.5.1

after the above-commented code block? After that, you should recreate the cert and copy it plus the key to both machines.

Best regards,
Carlos R. Hernández

AmazingTrans 2018-04-13 12:47:45 UTC #15

Hi, on the last part, how do i recreate the cert ?
Both machine as in the bitnami machine and also the server side?

crhernandez 2018-04-16 08:56:15 UTC #16

Hi,

It depends on the current configuration and the tool you are using for the certificate, we recommend use Let's Encrypt for manage certificates, you can follow this guide to configure it.

Best regards,
Carlos R. Hernández

AmazingTrans 2018-04-16 17:54:13 UTC #17

Hi,

Is it possible i create a self-sign certificate?

Would this link below do the same thing?
https://docs.bitnami.com/general/components/apache/#how-to-create-an-ssl-certificate

AmazingTrans 2018-04-16 22:37:50 UTC #19

I tried the 'https://docs.bitnami.com/general/components/apache/#how-to-create-an-ssl-certificate" and it did not work. I even ran the bitnami ctrlscript to restart.

Going to try next with the let's encrypt guide. Not sure the differences between the one i just did and the one you recommended?

crhernandez 2018-04-17 10:26:45 UTC #20

Hi,

A certificate request can then be sent to a certificate authority (CA) to get it signed into a certificate, or if you have your own certificate authority, you may sign it yourself. Let's Encrypt is a free Certificate Authority (CA) that issues SSL certificates.

About the mail issue, did you try to configure a third-party service? You can follow this guide.

Also, this guide is really helpful:

https://docs.bitnami.com/virtual-machine/how-to/troubleshoot-smtp-issues/

Best regards,
Carlos R. Hernández

AmazingTrans 2018-04-17 14:39:44 UTC #21

Should this link on how to create ssl certificate and self sign work?

Bitnami provides free all-in-one installers, virtual machines and cloud images for popular open source applications. Get them now!