What's the best way to check if an SMTP server is SSL-enabled or not?
Follow-up question: How do I make it SSL-enabled if it's not yet SSL-enabled.
The OS is CentOS.
That depends whether you mean SSL or TLS.
In order to say how to enable SSL/TLS for your mail server you'll need to tell us what mail package you're using.
If you are running CentOS, you are probably using Sendmail. Install the Sendmail-mc package. Inside the /etc/mail/sendmail.mc are some directives for you to look into for TLS:
Once you have that working, you can enable Sendmail over SSL with something like so:
Oh, and block a bunch of time to play with it before you get it right.
When I've done this, I've almost always had to run three instances of sendmail:
Each one had a separate config file. There should be a way to get the first two to run as the same instance listening on both ports, but I could never get it to work right.
If you get big enough, these different instances can get run on different machines.
In my mind the answers given on this page are simply wrong.
The reason is that SSL/TLS + SMTP can mean two different things.
One is where you wrap the socket in SSL/TLS. If the server wants to service both unencrypted and encrypted traffic then it needs two ports for this purpose, one for each type of traffic. By convention SMTP servers normally uses port 25 for unencrypted traffic and port 465 for encrypted traffic. By use of external tools such as stunnel this can actually be implemented in such a way so that both the client and the server are unaware that the actual traffic travels on an encrypted socket. So you can implement this approach even if your SMTP server does not support SSL/TLS .. but servers like sendmail and postfix do support this so no need for an external tool.
The other approach is that STARTTLS is used. This is an extension to the SMTP protocol and thus requires both the server and the client to support it. Using STARTTLS the server can serve both encrypted traffic and unencrypted traffic over the same socket, i.e. you can use port 25 for both. You can see if a SMTP server has STARTTLS enabled by connecting to it on port 25 and issuing the
Both SSL and TLS are just encryption protocols, TLS being the successor to SSL.
I've got my info from here.
The confusion between the two approaches is accelerated by the terminology used by SMTP servers. Think of Postfix's parameters