Arch Linux

drag0nl0rd

Package Maintainer (PM)

From: Czech Republic

Registered: 2007-10-24

Posts: 127

Website

[solved] mutt, msmtp & gmail not working, TLS certificate veri. failed

Today I can't send emails again, ending up with this message:

msmtp: TLS certificate verification failed: the certificate hasn't got a known issuer
msmtp: could not send mail

I got this issue a week ago, then I downloaded the ca-certificates package and changed everything according to http://mychael.gotdns.com/blog/2007/04/ … archlinux/ the it worked again, but today it's back
Anyone with the same issue or working config?
My config here:

account                   gmail-sec
host         smtp.gmail.com
protocol                   smtp
auth         on
user        myname@gmail.com
password                  mypass
tls        on
port        587
tls_trust_file    /usr/share/ca-certificates/mozilla/Thawte_Premium_Server_CA.crt

Last edited by drag0nl0rd (2008-07-30 09:33:09)

Zeist

Arch Linux f@h Team Member

Registered: 2008-07-04

Posts: 532

Re: [solved] mutt, msmtp & gmail not working, TLS certificate veri. failed

They switched certificates sometime really recently

They now have an equifax certificate for their smtp server: Equifax_Secure_CA.crt is the one you need.

Last edited by Zeist (2008-07-30 09:03:59)

---

I haven't lost my mind; I have a tape back-up somewhere.
Twitter

drag0nl0rd

Package Maintainer (PM)

From: Czech Republic

Registered: 2007-10-24

Posts: 127

Website

Re: [solved] mutt, msmtp & gmail not working, TLS certificate veri. failed

They switched certificates sometime really recently
They now have an equifax certificate for their smtp server: Equifax_Secure_CA.crt is the one you need.

You are right! Thanks, you saved my day

shining

Pacman Developer

Registered: 2006-05-10

Posts: 2,043

Re: [solved] mutt, msmtp & gmail not working, TLS certificate veri. failed

This is definitely information that needs to be added there :
http://wiki.archlinux.org/index.php/Mut … p_for_SMTP

I don't use msmtp much but probably I will run into that issue sooner or later, so when that happens, I will test that change and try to update that wiki page if no one did it then.

---

pacman roulette : pacman -S $(pacman -Slq | LANG=C sort -R | head -n $((RANDOM % 10)))

drag0nl0rd

Package Maintainer (PM)

From: Czech Republic

Registered: 2007-10-24

Posts: 127

Website

Re: [solved] mutt, msmtp & gmail not working, TLS certificate veri. failed

@shining: on that wiki page is a link to another web page which explains the certificates issue
(msmtp, TLS, and ArchLinux gives instructions on how to configure the certificate for msmtp.) and on that page I found a week ago the solution for my problem. So now I put a comment with the latest used certificate. But if you have time, you can of course also change the wiki page

shining

Pacman Developer

Registered: 2006-05-10

Posts: 2,043

Re: [solved] mutt, msmtp & gmail not working, TLS certificate veri. failed

@shining: on that wiki page is a link to another web page which explains the certificates issue
(msmtp, TLS, and ArchLinux gives instructions on how to configure the certificate for msmtp.) and on that page I found a week ago the solution for my problem. So now I put a comment with the latest used certificate. But if you have time, you can of course also change the wiki page

Ok I see, there is a comment on that external page. Well, that will do for now.

However, what I would like to see eventually is a small wiki page dedicated to msmtp, with all required information on it, so that we don't need to look at other blog post. And then replace the msmtp section on mutt page by a simple link to that new msmtp page.
There is no reason to tie msmtp with mutt.

---

pacman roulette : pacman -S $(pacman -Slq | LANG=C sort -R | head -n $((RANDOM % 10)))

shining

Pacman Developer

Registered: 2006-05-10

Posts: 2,043

Re: [solved] mutt, msmtp & gmail not working, TLS certificate veri. failed

@shining: on that wiki page is a link to another web page which explains the certificates issue
(msmtp, TLS, and ArchLinux gives instructions on how to configure the certificate for msmtp.) and on that page I found a week ago the solution for my problem. So now I put a comment with the latest used certificate. But if you have time, you can of course also change the wiki page

Ok I see, there is a comment on that external page. Well, that will do for now.

However, what I would like to see eventually is a small wiki page dedicated to msmtp, with all required information on it, so that we don't need to look at other blog post. And then replace the msmtp section on mutt page by a simple link to that new msmtp page.
There is no reason to tie msmtp with mutt.

As I expected, I eventually ran into this problem and had to fix it, which reminded me of this thread.
So here it is :
http://wiki.archlinux.org/index.php/Msmtp
http://wiki.archlinux.org/index.php/Mutt#Sending_Mail

Please do not hesitate to improve it as you see fit.

---

pacman roulette : pacman -S $(pacman -Slq | LANG=C sort -R | head -n $((RANDOM % 10)))