Uploaded image for project: 'OpenNMS'
  1. OpenNMS
  2. NMS-12733

No support for TLS v1.3 in MailTransportMonitor

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 25.0.0
    • Fix Version/s: 27.0.1
    • Component/s: None
    • Security Level: Default (Default Security Scheme)
    • Labels:
      None
    • Sprint:
      Horizon 2020 - Nov 11-Nov 24
    • HB Backlog Status:
      Backlog

      Description

      The MailTransportMonitor failes to receive a Message if the IMAP server in use uses TLS > 1.1 via STARTLS.

      2020-09-14 07:56:08,329 WARN  [pool-13-thread-74381] o.o.n.p.m.MailTransportMonitor: readTestMessage: error reading INBOX
      javax.mail.MessagingException: STARTTLS failure (com.sun.mail.iap.ProtocolException: STARTTLS failure)
              at com.sun.mail.imap.IMAPStore.protocolConnect(IMAPStore.java:668) ~[mail-1.4.5.jar:1.4.5]
              at javax.mail.Service.connect(Service.java:251) ~[geronimo-javamail_1.4_spec-1.7.1.jar:1.7.1]
              at org.opennms.netmgt.poller.monitors.MailTransportMonitor.retrieveMailFolder(MailTransportMonitor.java:397) ~[opennms-services-26.1.3.jar:?]
              at org.opennms.netmgt.poller.monitors.MailTransportMonitor.readTestMessage(MailTransportMonitor.java:220) [opennms-services-26.1.3.jar:?]
              at org.opennms.netmgt.poller.monitors.MailTransportMonitor.doMailTest(MailTransportMonitor.java:167) [opennms-services-26.1.3.jar:?]
              at org.opennms.netmgt.poller.monitors.MailTransportMonitor.poll(MailTransportMonitor.java:108) [opennms-services-26.1.3.jar:?]
              at org.opennms.netmgt.poller.client.rpc.PollerClientRpcModule$1.get(PollerClientRpcModule.java:77) [org.opennms.features.poller.client-rpc-26.1.3.jar:?]
              at org.opennms.netmgt.poller.client.rpc.PollerClientRpcModule$1.get(PollerClientRpcModule.java:71) [org.opennms.features.poller.client-rpc-26.1.3.jar:?]
              at java.util.concurrent.CompletableFuture$AsyncSupply.run(CompletableFuture.java:1590) [?:1.8.0_191]
              at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_191]
              at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_191]
              at java.lang.Thread.run(Thread.java:748) [?:1.8.0_191]
      Caused by: com.sun.mail.iap.ProtocolException: STARTTLS failure
              at com.sun.mail.imap.protocol.IMAPProtocol.startTLS(IMAPProtocol.java:826) ~[mail-1.4.5.jar:1.4.5]
              at com.sun.mail.imap.IMAPStore.login(IMAPStore.java:681) ~[mail-1.4.5.jar:1.4.5]
              at com.sun.mail.imap.IMAPStore.protocolConnect(IMAPStore.java:648) ~[mail-1.4.5.jar:1.4.5]
              ... 11 more
      Caused by: javax.net.ssl.SSLException: Received fatal alert: protocol_version
              at sun.security.ssl.Alerts.getSSLException(Alerts.java:208) ~[?:1.8.0_191]
              at sun.security.ssl.Alerts.getSSLException(Alerts.java:154) ~[?:1.8.0_191]
              at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:2020) ~[?:1.8.0_191]
              at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1127) ~[?:1.8.0_191]
              at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367) ~[?:1.8.0_191]
              at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1395) ~[?:1.8.0_191]
              at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1379) ~[?:1.8.0_191]
              at com.sun.mail.util.SocketFetcher.configureSSLSocket(SocketFetcher.java:548) ~[mail-1.4.5.jar:1.4.5]
              at com.sun.mail.util.SocketFetcher.startTLS(SocketFetcher.java:485) ~[mail-1.4.5.jar:1.4.5]
              at com.sun.mail.iap.Protocol.startTLS(Protocol.java:384) ~[mail-1.4.5.jar:1.4.5]
              at com.sun.mail.imap.protocol.IMAPProtocol.startTLS(IMAPProtocol.java:810) ~[mail-1.4.5.jar:1.4.5]
              at com.sun.mail.imap.IMAPStore.login(IMAPStore.java:681) ~[mail-1.4.5.jar:1.4.5]
              at com.sun.mail.imap.IMAPStore.protocolConnect(IMAPStore.java:648) ~[mail-1.4.5.jar:1.4.5]
              ... 11 more
      

        Attachments

          Activity

            People

            Assignee:
            swachter Stefan Wachter
            Reporter:
            fooker Dustin Frisch
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              HB Grooming Date:

                Git Integration