Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I can not route may emails vie gmail.com. I use ssmtp facility. My config files in /etc/ssmtp are

root:yyyyy@gmail.com:smtp.gmail.com:587
maciek:yyyyy@gmail.com:smtp.gmail.com:587

and ssmtp.conf:

rewriteDomain=gmail.com
root=yyyyy@op.pl
maciek=yyyyy@op.pl
hostname=yyyyyy@gmail.com
UseTLS=YES
UseSTARTTLS=YES
AuthUser=yyyyy@gmail.com
AuthPass=MyPass
FromLineOverride=YES

So I try:

# mail yyyyy@orange.pl
Subject: ddd
ddd
.
EOT
# send-mail: Cannot open smtp.gmail.com:587

Nothing block the traffic to gmail server as shown below:

$ telnet smtp.gmail.com 587
Trying 173.194.70.108...
Connected to smtp.gmail.com.
Escape character is '^]'.
220 mx.google.com ESMTP n1sm56130900eep.20 - gsmtp
ehlo
250-mx.google.com at your service, [83.25.153.55]
250-SIZE 35882577
250-8BITMIME
250-STARTTLS
250-ENHANCEDSTATUSCODES
250 CHUNKING
quit
221 2.0.0 closing connection n1sm56130900eep.20 - gsmtp
Connection closed by foreign host.

Logs from my system journalctl:

Dec 11 22:45:55 piotr sSMTP[7571]:
Creating SSL connection to host Dec 11 22:45:55 piotr sSMTP[7571]:
SSL not working: certificate verify fail...0) Dec 11 22:45:55 piotr sSMTP[7571]:
Cannot open smtp.gmail.com:587

No other MTA agent is installed on this computer (like sendmail). So what I am configuring wrong?

share|improve this question
    
Check /var/log for ssmtp logs and see what they say. –  Wesley Dec 11 '13 at 18:01
    
My system use journalctl. So You have: Dec 11 22:45:55 piotr sSMTP[7571]: Creating SSL connection to host Dec 11 22:45:55 piotr sSMTP[7571]: SSL not working: certificate verify fail...0) Dec 11 22:45:55 piotr sSMTP[7571]: Cannot open smtp.gmail.com:587 –  mackowiakp Dec 11 '13 at 21:46
    
Okay, that could be of use. Add that to the question because in so doing, you'll bump it back up to the top of the question queue and get more eyeballs on it. –  Wesley Dec 11 '13 at 21:48

1 Answer 1

up vote 1 down vote accepted

Did you check if your selinux enabled?

Also, you may need this option:

  • TLS_CA_Dir
    • A directory of trusted certificates for validating the server, if required.

Basically tell your system where your CA certs are so that it doesn't think Gmail has an invalid cert.

share|improve this answer
    
OK. THX. You help me. It works! I just add the line: TLS_CA_File=/etc/pki/tls/certs/ca-bundle.crt –  mackowiakp Dec 12 '13 at 8:11

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.