ColdFusion email settings with TLS

Question

I am trying to configure ColdFusion to send emails using 1&1's servers (smtp.1and1.com) and even though I have set the username and password it keeps failing.

This is what I've done so far:

Set outgoing server to smtp.1and1.com
set username and password
set port to 587
selected Use TLS checkbox
selected Verify Settings box

when I click Save I get the message "Connection Verification Failed!"

In the ColdFusion log files in the mail.log I see this error:

"Error","scheduler-1","03/22/16","19:39:21",,"Can't send command to SMTP host"

I ran WireShark and captured some packets and it seems it does connect to the server, some communication goes back and forth, and then it aborts.

Below is a sample of the capture:

  No Time     Protocol Length Info
     1 0.000000 TCP      66     49858 ? 587 [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1
     2 0.000567 TCP      66     587 ? 49858 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM=1 WS=512
     3 0.000611 TCP      54     49858 ? 587 [ACK] Seq=1 Ack=1 Win=131328 Len=0
     4 0.007028 SMTP     112    S: 220 perfora.net (mreueus002) Nemesis ESMTP Service ready
     5 0.015100 SMTP     70     C: EHLO vm229CAC8
     6 0.015556 TCP      60     587 ? 49858 [ACK] Seq=59 Ack=17 Win=29696 Len=0
     7 0.015697 SMTP     159    S: 250 perfora.net Hello vm229CAC8 [**.**.**.**] | 250 SIZE 69920427 | 250 AUTH LOGIN PLAIN | 250 STARTTLS
     8 0.019485 SMTP     64     C: STARTTLS
     9 0.021416 SMTP     62     S: 220 OK
    10 0.058490 TLSv1    132    Client Hello
    11 0.059244 TLSv1    1514   Server Hello
    12 0.059246 TCP      1514   [TCP segment of a reassembled PDU]
    13 0.059283 TCP      54     49858 ? 587 [ACK] Seq=105 Ack=3092 Win=131328 Len=0
    14 0.059308 TLSv1    710    Certificate
    15 0.070314 TLSv1    61     Alert (Level: Fatal, Description: Certificate Unknown)
    16 0.070368 TCP      54     49858 ? 587 [FIN, ACK] Seq=112 Ack=3748 Win=130560 Len=0
    17 0.070858 TLSv1    61     Alert (Level: Fatal, Description: Internal Error)
    18 0.070905 TCP      54     49858 ? 587 [RST, ACK] Seq=113 Ack=3755 Win=0 Len=0
    19 0.071198 TCP      60     587 ? 49858 [FIN, ACK] Seq=3755 Ack=113 Win=29696 Len=0

All of which makes me think that there is something with the certificate (since it aborts before it even bothers with the username and password).

I've saved the 3 certificates from packet 14 and looked at them and they all seem fine - validity is OK, Thawte is the root CA - checked and confirmed the included one is OK, etc.

What am I missing? And are there any other log files that might shed some more light on this issue?

Thanks

ColdFusion email settings with TLS

1 Answers