Ask a question
Search in U-verse Forums

U-verse Forums

Reply
Posted Oct 7, 2013
6:40:38 AM
View profile
Certificate verification errors with smtps

I am trying to send outbound emails using smtp.att.yahoo.com.  Occasionally, I see emails go through successfully, but most of the time, I get SSL certificate verification errors.

 

On a Linux box, I used "openssl s_client -connect smtp.att.yahoo.com:465" to take a look at the certificate, and I see just one certificate, which fails verifcation because it is not a trusted issuer.  That certifcate is:

  1: Subject: smtp.att.yahoo.com,  Issuer: DigiCert High Assurance CA-3

 

When it goes through successfully, my logs show that there were 2 certificates in a chain:

  1: Subject: smtp.att.yahoo.com,  Issuer: DigiCert High Assurance CA-3

  2: Subject: DigiCert High Assurance CA-3,  Issuer: DigiCert High Assurance EV Root CA

 

This verifies successfully because the second certificate is a trusted root certificate.

 

It seems to me that AT&T/Yahoo has a cluster of SMTP servers, and most of them are sending incomplete certificate information.  But occasionally I connect to a cluster member that is configured correctly and my email goes through.

 

This has been going on for quite a while now.  But recently, it got a lot worse, and my emails have been sitting in my outbox for 3 days!  Perhaps the correctly configured cluster member went offline and so now there are no good SMTP server left???  Please help me get this resolved, so that all SMTP servers have correct certificate information.

I am trying to send outbound emails using smtp.att.yahoo.com.  Occasionally, I see emails go through successfully, but most of the time, I get SSL certificate verification errors.

 

On a Linux box, I used "openssl s_client -connect smtp.att.yahoo.com:465" to take a look at the certificate, and I see just one certificate, which fails verifcation because it is not a trusted issuer.  That certifcate is:

  1: Subject: smtp.att.yahoo.com,  Issuer: DigiCert High Assurance CA-3

 

When it goes through successfully, my logs show that there were 2 certificates in a chain:

  1: Subject: smtp.att.yahoo.com,  Issuer: DigiCert High Assurance CA-3

  2: Subject: DigiCert High Assurance CA-3,  Issuer: DigiCert High Assurance EV Root CA

 

This verifies successfully because the second certificate is a trusted root certificate.

 

It seems to me that AT&T/Yahoo has a cluster of SMTP servers, and most of them are sending incomplete certificate information.  But occasionally I connect to a cluster member that is configured correctly and my email goes through.

 

This has been going on for quite a while now.  But recently, it got a lot worse, and my emails have been sitting in my outbox for 3 days!  Perhaps the correctly configured cluster member went offline and so now there are no good SMTP server left???  Please help me get this resolved, so that all SMTP servers have correct certificate information.

Certificate verification errors with smtps

599 views
3 replies
(0) Me too
(0) Me too
Reply
View all replies
(3)
0
(0)
  • Rate this reply
View profile
Oct 7, 2013 10:30:34 AM
0
(0)
ACE - Master

I would recommend that you send a Private Message to the ATTU-verseCare Community Specialist team.  One of the specialists will respond to your PM shortly.  Please look for the flashing envelope at the top right of the page for your response from a team member.

 

Reference your post and they should be able to assist you.  You can copy and paste this: http://forums.att.com/t5/Features-and-How-To/Certificate-verification-errors-with-smtps/m-p/3645781

 

 

"If you find this post helpful and it solved your issue please mark it as a solution.  This will help other forum members locate it and will also let everyone know that it corrected your problem. If they have the same issue they will know how to solve theirs"

I would recommend that you send a Private Message to the ATTU-verseCare Community Specialist team.  One of the specialists will respond to your PM shortly.  Please look for the flashing envelope at the top right of the page for your response from a team member.

 

Reference your post and they should be able to assist you.  You can copy and paste this: http://forums.att.com/t5/Features-and-How-To/Certificate-verification-errors-with-smtps/m-p/3645781

 

 

"If you find this post helpful and it solved your issue please mark it as a solution.  This will help other forum members locate it and will also let everyone know that it corrected your problem. If they have the same issue they will know how to solve theirs"

*The views and opinions expressed on this forum are purely my own. Any product claim, statistic, quote, or other representation about a product or service should be verified with the manufacturer, provider, or party.

Re: Certificate verification errors with smtps

2 of 4 (580 Views)
Highlighted
0
(0)
  • Rate this reply
View profile
Oct 8, 2013 4:54:37 PM
0
(0)
Community Support

Hello heathens17715,

 

We have received your message and look forward to working with you on this issue to get it resolved.

Need more help?

Download the myAT&T App and click Fix It Now! Support Tools to get U-verse help. For more assistance, send a quick message to ATTU-verseCare. Be sure to include your account number, name, and contact number.

Hello heathens17715,

 

We have received your message and look forward to working with you on this issue to get it resolved.

Need more help?

Download the myAT&T App and click Fix It Now! Support Tools to get U-verse help. For more assistance, send a quick message to ATTU-verseCare. Be sure to include your account number, name, and contact number.
*I am an AT&T employee and the postings on this site are my own and don’t necessarily represent AT&T’s position, strategies or opinions.

Re: Certificate verification errors with smtps

3 of 4 (543 Views)
0
(0)
  • Rate this reply
View profile
Oct 12, 2013 8:38:11 AM
0
(0)
Contributor

Thanks for the pointer.  The Private Message worked and the response was quick and to the point.

 

The solution was embarrassingly simple: switch to the new SMTP address (outbound.att.net).  This new address implements SSL certificates correctly and my emails are going through quicker than ever before.

Thanks for the pointer.  The Private Message worked and the response was quick and to the point.

 

The solution was embarrassingly simple: switch to the new SMTP address (outbound.att.net).  This new address implements SSL certificates correctly and my emails are going through quicker than ever before.

Re: Certificate verification errors with smtps

4 of 4 (489 Views)
Advanced
You must be signed in to add attachments
Share this post
Share this post