TLS
TLS Email is an option for alert and status emails if you want to use encrypted mail or
relay mails through mailers like GoogleMail. If you only want to send mail to your Googleaccount
this can be done unencrypted via port 25, see https://support.google.com/a/answer/176600?hl=en
(smtp-server=aspmx.l.google.com)
Encrypted TLS email requires that you install the needed OS TLS modules for encryption
OmniOS
To enable TLS emails on OmniOS 151018 and up, use the following setup
(use putty, login as root and copy/paste commands with a mouse right-click, on questions use defaults thanks to Rick)
perl -MCPAN -e shell
notest install Net::SSLeay
notest install IO::Socket::SSL
notest install Net::SMTP::TLS
exit;
If you get a compiler/make error at the end of an install, (re)install a compiler ex gcc7
pkg install --deny-new-be developer/gcc7
pkg install --deny-new-be gnu-tar linker header-math object-file gnu-coreutils lint system/header
If you get a warning "auth failed" from Gmail then:
Login to Gmail settings. On the bottom of the settings, you find the option: allow less security apps; set to on
https://www.google.com/settings/security/lesssecureapps
TLS Problems after an update to OmniOS 151028
TLS is not working and the above setup fails:
workaround: install 151028 from scratch, import datapools and restore /var/web-gui/_log/* and users with same uid
TLS email on OmniOS 151014 not working due a compiler error with SSLeay
This can be fixed with a (Thanks to Michael)
perl Makefile.PL CCCDLFLAGS='-DOPENSSL_NO_MD2 -fPIC'
OpenIndiana Hipster
# during napp-it setup
# pkg install --deny-new-be gcc-49 gnu-tar linker header-math object-file gnu-coreutils lint system/header
# pkg install automake
perl -MCPAN -e shell
notest install Net::SSLeay
notest install IO::Socket::SSL
notest install Net::SMTP::TLS
exit;
Option for Solaris 11 (11.3 and 11.4)
## Step 1: install net-ssleay on Oracle Solaris
pkg install net-ssleay
## step2: Install CPAN modules (source of Perl modules)
perl -MCPAN -e shell
-> and answer yes when it asks if it should try to configure as much as possible by itself
at the cpan prompt, enter:
install Net::SMTP::TLS
exit
-> and answer all questions with the default answer.
Optionally reload CPAN files with newest prior installing Net::SMTP::TLS
install CPAN
reload cpan
exit
At least for Solaris 11.2 you need a different SSL.pm
Download:
http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/IO-Socket-SSL-1.77.tar.gz
extract this tar example with 7Zip. You need the SSL.pm from the top directory
then replace (ex via WinSCP)
/usr/perl5/site_perl/5.12/IO/Socket/SSL.pm
with the file from the above tar.gz
and optionally Net::IDN::Encode if you use internationa domains with Umlauts
The following is obsolete with current releases:
## There is a bug in the installed TLS.pm module
From napp-it 0.9f1 on, this is fixed automatically
If you use napp-it < 0.9f1 newest, you must fix the bug manually
Change "SSLv3 TLSv1" to "SSLv3" [remove the TLSv1] in
/usr/perl5/site_perl/t.16.1/Net/SMTP/TLS.pm on line 182
https://rt.cpan.org/Public/Bug/Display.html?id=77401