TLS

Google has disabled sending mails through apps, see https://wpmailsmtp.com/gmail-less-secure-apps/. If you want to send alerts over Gmail, you must use TLS and you must enable 2FA authentication. After this you can create an app password .

You can then send encrypted mails with your emailadress as user and the app password. For Jobs > Reports you can select SSL encrypted mails per job. For Jobs > Email Alerts/Status you must switch mail to TLS in menu Jobs > Email> enable TLS

obsolete:
TLS Email is an option for alert and status emails if you want to use encrypted mail or
relay mails through mailers like GoogleMail. If you only want to send mail to your Googleaccount
this can be done unencrypted via port 25, see https://support.google.com/a/answer/176600?hl=en
(smtp-server=aspmx.l.google.com)

Encrypted TLS email requires that you install the needed OS TLS modules for encryption

OmniOS

To enable TLS emails on OmniOS 151018 and up, use the following setup
(use putty, login as root and copy/paste commands with a mouse right-click, on questions use defaults thanks to Rick)

perl -MCPAN -e shell
install CPAN
reload cpan
notest install Net::SSLeay
notest install IO::Socket::SSL
notest install Net::SMTP::TLS
exit

optionally update on an older OS/Perl:
perl -MCPAN -e shell
notest install Net::SMTP
notest install Authen::SASL

optionally update all CPAN modules
perl -MCPAN -e "upgrade /(.\*)/"
or for ex
perl -MCPAN -e "upgrade (IO::Socket::SSL)"

OpenIndiana Hipster 10/2022
I initially had problems with compiling the Perl modules. A clean reinstall with gcc-7 solved my problems

If you get a compiler/make error at the end of an install, (re)install a compiler ex gcc-7 or gcc10 or gcc-11
pkg install --deny-new-be developer/gcc-10
pkg install --deny-new-be gnu-tar linker header-math object-file gnu-coreutils lint system/header

If you get a warning "auth failed" from Gmail then:
Login to Gmail settings. On the bottom of the settings, you find the option: allow less security apps; set to on
https://www.google.com/settings/security/lesssecureapps

TLS Problems after an update to OmniOS 151028
TLS is not working and the above setup fails:
workaround: install 151028 from scratch, import datapools and restore /var/web-gui/_log/* and users with same uid

TLS email on OmniOS 151014 not working due a compiler error with SSLeay
This can be fixed with a (Thanks to Michael)
perl Makefile.PL CCCDLFLAGS='-DOPENSSL_NO_MD2 -fPIC'

OpenIndiana Hipster

# during napp-it setup
# pkg install --deny-new-be gcc-49 gnu-tar linker header-math object-file gnu-coreutils lint system/header
# pkg install automake

perl -MCPAN -e shell
notest install Net::SSLeay
notest install IO::Socket::SSL
notest install Net::SMTP::TLS
exit;

Option for Solaris 11 (11.3 and 11.4)

## Step 1: install net-ssleay on Oracle Solaris
pkg install net-ssleay

## step2: Install CPAN modules (source of Perl modules)

perl -MCPAN -e shell
-> and answer yes when it asks if it should try to configure as much as possible by itself

at the cpan prompt, enter:
install Net::SMTP::TLS
exit

-> and answer all questions with the default answer.

Optionally reload CPAN files with newest prior installing Net::SMTP::TLS
install CPAN
reload cpan
exit

At least for Solaris 11.2 you need a different SSL.pm

Download:
http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-1.77.tar.gz

extract this tar example with 7Zip. You need the SSL.pm from the top directory

then replace (ex via WinSCP)
/usr/perl5/site_perl/5.12/IO/Socket/SSL.pm
with the file from the above tar.gz

and optionally Net::IDN::Encode if you use internationa domains with Umlauts

The following is obsolete with current releases:

## There is a bug in the installed TLS.pm module
From napp-it 0.9f1 on, this is fixed automatically

If you use napp-it < 0.9f1 newest, you must fix the bug manually
Change "SSLv3 TLSv1" to "SSLv3" [remove the TLSv1] in
/usr/perl5/site_perl/t.16.1/Net/SMTP/TLS.pm on line 182

https://rt.cpan.org/Public/Bug/Display.html?id=77401

napp-it 14.10.2024