Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Out of the blue suddenly all outgoing email messages are delayed since yesterday. Exchange generates a warning email stating that delevery is delayed. Troubleshooting the Exchange message queue unearths that the error is 'server does not support secure connections' I did not touch any settings recently, the server's third party certificate is valid through 2013.

What is happening?

EDIT: I checked the Certicicate using Get-ExchangeCertificate | fl. I found a few self-issued certificates that were valid, but my comercially issued certificate is qualified as invalid (I removerd the SN en the thumbprint:

AccessRules        : {System.Security.AccessControl.CryptoKeyAccessRule, System
                     .Security.AccessControl.CryptoKeyAccessRule, System.Securi
                     ty.AccessControl.CryptoKeyAccessRule, System.Security.Acce
                     ssControl.CryptoKeyAccessRule}
CertificateDomains : {www.fk27.com, fk27.com} 
HasPrivateKey      : True
IsSelfSigned       : False
Issuer             : CN=EssentialSSL CA, O=COMODO CA Limited, L=Salford, S=Grea
                     ter Manchester, C=GB 
NotAfter           : 20-9-2013 1:59:59 
NotBefore          : 19-9-2008 2:00:00 
PublicKeySize      : 1024 
RootCAType         : Unknown 
SerialNumber       : (removed) 
Services           : IIS, SMTP 
**Status             : Invalid** 
Subject            : CN=www.fk27.com, OU=EssentialSSL, OU=Domain Control Valida
                     ted 
Thumbprint         : (removed) 

So, what do I do now?

share|improve this question
    
Does outgoing email go direct to recipients mail servers, or via a smarthost type setup, where it goes to an external server first, which then delivers it on? –  Paul Oct 4 '11 at 22:57
    
Check the details of your exchange certificate with the following Exchange Console command Get-ExchangeCertificate | fl. Also check to make sure you have the most updated Service pack installed for Exchange. That sounds really familiar. –  Nixphoe Oct 5 '11 at 3:58
    
@ Paul: I redirect to mailhop, from Dyn. –  Dabblernl Oct 5 '11 at 6:05
1  
Are all the intermediate certificates OK? One wasn't signed by DigiNotar by any chance was it? An update may have been installed somewhere, removing the trust for their CA and causing things to come to a grinding halt. –  Ben Pilbrow Oct 5 '11 at 12:14
    
Is the time set correctly on the server? –  devicenull Oct 6 '11 at 23:56
add comment

migrated from superuser.com Oct 5 '11 at 0:52

This question came from our site for computer enthusiasts and power users.

1 Answer

up vote 1 down vote accepted

While the Get-ExchangeCertificate | fl command still shows that the Essential SSL certificate is invalid, the sending of email has resumed without errors without my doing anything about it...

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.