Configuring phabricator outbound email

AmazingTrans 2018-04-17 18:32:54 UTC #22

So, i created the certificates, and i noticed the following error when running the phabricator logs.

Log1
Is this cause by me not creating the certificate properly ?
10.10.5.1 is the mailing server address
Not sure what they mean did not match expected

Daemon 6035 STDE [Tue, 17 Apr 2018 14:28:02 -0400] [2018-04-17 14:28:02] ERROR 2: stream_socket_enable_crypto(): Peer certificate CN=*.mycompany.com' did not match expected CN=10.10.5.1' at [/opt/apps/phabricator/htdocs/externals/phpmailer/class.smtp.php:197]

Log2
Not sure what is this.

Daemon 6033 STDE [Tue, 17 Apr 2018 14:28:33 -0400] [2018-04-17 14:28:33] EXCEPTION: (PhutilProxyException) Error while executing Task ID 9834. {>} (phpmailerException) Language string failed to load: tls at [/externals/phpmailer/class.phpmailer.php:788]

Log3
I guess it tried 3 times, and still fail.

Daemon 6033 FAIL [Tue, 17 Apr 2018 14:28:33 -0400] Process exited with error 255.

AmazingTrans 2018-04-17 21:21:44 UTC #23

I have restored my old bitbami phabricator that has PHP V5.5.28. The emailing system there works.
By copying across the server.crt & server.key from there to the new phabricator, would it work?
I tried copying from the following directory, to the new server, and reboot entirely the new VM that has PHP7.1.15. the mailing server still does not work

./opt/bitnami/apache2/conf/server.csr
./opt/bitnami/apache2/conf/server.crt
./opt/bitnami/apache2/conf/server.key
./opt/bitnami/apps/phabricator/conf/certs/server.crt
./opt/bitnami/apps/phabricator/conf/certs/server.key
./opt/bitnami/apps/phpmyadmin/conf/certs/server.crt
./opt/bitnami/apps/phpmyadmin/conf/certs/server.key

AmazingTrans 2018-04-18 04:40:51 UTC #24

Looks like let's encrypt is also recommending to generate self-signed as long as i'm in development phase. I tried it based on this site, and it still don't work.
i ran the smtp checker, and it says x509, cannot validate certificate for 10.10.10.5 (Mail server) because it doesn't contain any IP SANs.

Does this has to do with the values i fill in for Domain Name, company name etc?

AmazingTrans 2018-04-19 03:44:04 UTC #25

crhernandez,

When creating certificate, do we use common name = ip address of the virtual machine?
Since the application is more of a intranet / private network and the VM has ip address instead of DNS name, Let's encrypt will not create cert for us. Do you have any suggestion what should private network do to allow creation of LE certificate?
2a. can we just create a hostname using dns server and name it: www.mywebpage.abc
Then from there we use LE to create this certificate?
Once this is created, then we also make sure the main server (Not VM) and the VM also install the LE certificate ?

crhernandez 2018-04-24 08:53:15 UTC #26

Hi,

We are sorry for the late response. You can use xip.io to set a free domain for your private server, if you configure xip.io, you can integrate it with Let's Encrypt.

Additional resources:

Best regards,
Carlos R. Hernández

system 2018-05-08 08:53:18 UTC #27

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Bitnami provides free all-in-one installers, virtual machines and cloud images for popular open source applications. Get them now!