Kann nicht mehr senden (SMTP GMail)

BRX

Jetzt will Google (gmail.com) nicht mehr senden (wohl aber empfangen). Detail im angehängten log file.

Wie GwenDragon früher geraten hat, ist in den Optionen S/MIME und TLS Certificates auf Microsoft Crypto API eingestellt.

Was nun?

Danke für Eure Hilfe!

Code

Nach längerem versucht, mit gmail zu senden (Empfang ok)

«invalid server cerificate»

 22-04-22, 15:53:59: FETCH - connection finished - 0 messages received
 22-04-22, 16:23:58: FETCH - receiving mail messages
 22-04-22, 16:23:58: FETCH - Connecting to POP3 server pop.gmail.com on port 995
 22-04-22, 16:23:58: FETCH - Initiating TLS handshake
>22-04-22, 16:23:58: FETCH - Certificate S/N: 307844474D38279F0A7C1D4B65435A8D, algorithm: RSA (2048 bits), issued from 4/11/2022 9:16:27 AM to 7/4/2022 9:16:26 AM, for 1 host(s): pop.gmail.com.
>22-04-22, 16:23:58: FETCH - Owner: pop.gmail.com.
>22-04-22, 16:23:58: FETCH - Issuer: US, Google Trust Services LLC, GTS CA 1C3.
 22-04-22, 16:23:58: FETCH - TLS handshake complete
 22-04-22, 16:23:58: FETCH - connected to POP3 server
 22-04-22, 16:23:59: FETCH - authenticated (plain)
 22-04-22, 16:23:59: FETCH - 0 messages in the mailbox, 0 new
 22-04-22, 16:23:59: FETCH - connection finished - 0 messages received
 22-04-22, 16:46:21: FETCH - receiving mail messages
 22-04-22, 16:46:21: FETCH - Connecting to POP3 server pop.gmail.com on port 995
 22-04-22, 16:46:21: FETCH - Initiating TLS handshake
>22-04-22, 16:46:21: FETCH - Certificate S/N: 307844474D38279F0A7C1D4B65435A8D, algorithm: RSA (2048 bits), issued from 4/11/2022 9:16:27 AM to 7/4/2022 9:16:26 AM, for 1 host(s): pop.gmail.com.
>22-04-22, 16:46:21: FETCH - Owner: pop.gmail.com.
>22-04-22, 16:46:21: FETCH - Issuer: US, Google Trust Services LLC, GTS CA 1C3.
 22-04-22, 16:46:21: FETCH - TLS handshake complete
 22-04-22, 16:46:21: FETCH - connected to POP3 server
 22-04-22, 16:46:23: FETCH - authenticated (plain)
 22-04-22, 16:46:23: FETCH - 0 messages in the mailbox, 0 new
 22-04-22, 16:46:23: FETCH - connection finished - 0 messages received
 22-04-22, 16:48:54: SEND  - sending mail message(s) - 1 message(s) in queue
 22-04-22, 16:48:54: SEND  - Connecting to SMTP server smtp.gmail.com on port 587
 22-04-22, 16:48:54: SEND  - Initiating TLS handshake
>22-04-22, 16:48:54: SEND  - Certificate S/N: 5F295964B84D42EC0A80914E2A25593A, algorithm: 1.2.840.10045.2.1 (256 bits), issued from 4/11/2022 9:17:47 AM to 7/4/2022 9:17:46 AM, for 1 host(s): smtp.gmail.com.
>22-04-22, 16:48:54: SEND  - Owner: smtp.gmail.com.
>22-04-22, 16:48:54: SEND  - Issuer: US, Google Trust Services LLC, GTS CA 1C3.
!22-04-22, 16:48:54: SEND  - TLS handshake failure. Invalid server certificate. The certificate cannot be used for this purpose
!22-04-22, 16:48:54: SEND  - The server has aborted the connection
 22-04-22, 16:48:54: SEND  - connection finished - 0 message(s) sent
 22-04-22, 16:48:54: SEND  - Some messages were not sent - check the log for details
 22-04-22, 16:51:28: SEND  - sending mail message(s) - 1 message(s) in queue
 22-04-22, 16:51:28: SEND  - Connecting to SMTP server smtp.gmail.com on port 587
 22-04-22, 16:51:28: SEND  - Initiating TLS handshake
>22-04-22, 16:51:28: SEND  - Certificate S/N: 5F295964B84D42EC0A80914E2A25593A, algorithm: 1.2.840.10045.2.1 (256 bits), issued from 4/11/2022 9:17:47 AM to 7/4/2022 9:17:46 AM, for 1 host(s): smtp.gmail.com.
>22-04-22, 16:51:28: SEND  - Owner: smtp.gmail.com.
>22-04-22, 16:51:28: SEND  - Issuer: US, Google Trust Services LLC, GTS CA 1C3.
!22-04-22, 16:51:28: SEND  - TLS handshake failure. Invalid server certificate. The certificate cannot be used for this purpose
!22-04-22, 16:51:28: SEND  - The server has aborted the connection
 22-04-22, 16:51:28: SEND  - connection finished - 0 message(s) sent
 22-04-22, 16:51:28: SEND  - Some messages were not sent - check the log for details

Alles anzeigen

**GwenDragon**

Welches The Bat! und welches Windows?

Verwendest du das Adressbuch für Zertifikate? Oder Einstellungen → SMIME & TLS → Windows Crypto API? Zertifikat aktuell und komplett?

Mir sieht es danach aus als fehle da was in der Kette der zertifikate.

Irgendwelche Sicherheitstools oder externe Filterprogramme?

**GwenDragon**

Ich kann mit The Bat! 9.5.1 Win 11 senden.
Ich nehme aber TLS über Port 465!

Code

 22.04.2022, 18:30:46: SEND  - Verbinde mit SMTP-Server smtp.gmail.com auf Port 465
 22.04.2022, 18:30:46: SEND  - Einleitung TLS-Handshake
>22.04.2022, 18:30:46: SEND  - Zertifikat S/N: 5F295964B84D42EC0A80914E2A25593A, Algorithmus: ECC (256 Bits), ausgestellt von 11.04.2022 09:17:47 bis 04.07.2022 09:17:46, für 1 Host(s): smtp.gmail.com.
>22.04.2022, 18:30:46: SEND  - Besitzer: "smtp.gmail.com".
>22.04.2022, 18:30:46: SEND  - Aussteller: "US", "Google Trust Services LLC", "GTS CA 1C3". Gültig ab 13.08.2020 00:00:42 bis 30.09.2027 00:00:42.
>22.04.2022, 18:30:46: SEND  - Aussteller: "US", "Google Trust Services LLC", "GTS Root R1". Gültig ab 19.06.2020 00:00:42 bis 28.01.2028 00:00:42.
>22.04.2022, 18:30:46: SEND  - Root: "BE", "GlobalSign nv-sa", "Root CA", "GlobalSign Root CA" Gültig ab 01.09.1998 12:00:00 bis 28.01.2028 12:00:00.
 22.04.2022, 18:30:46: SEND  - TLS-Handshake vollständig
 22.04.2022, 18:30:46: SEND  - Verbunden mit dem SMTP-Server
 22.04.2022, 18:30:46: SEND  - Sende Nachricht an spam@gwendragon.de
<22.04.2022, 18:30:47: SEND  - Nachricht an spam@gwendragon.de versandt (377 Byte)
 22.04.2022, 18:30:47: SEND  - Verbindung beendet - 1 Nachricht(en) versandt

Alles anzeigen

Hast du denn auch im Google-Konto > Sicherheit > Drittanbieter-Apps mit Kontozugriff für The Bat! freigegeben?

**sanyok**

Müsste am Port liegen. Mit 587 krieg ich nur:

Code

SEND  - TLS-Protokollfehler: Unerwartete Nachricht SessionUnknownContentType ct (50)

Mit 465 ist hingegen alles OK.

BRX

GwenDragon, sanyok: Danke Euch beiden!

Leider habe ich's dennoch bisher nicht geschafft, das Senden in Gang zu setzen. Antworten und neue Fragen:

GwenDragon:

Versionen:

The Bat Version 7.4.16 (64-bit)

Edition Windows 10 Home

Version 21H1

Installed on ?05-?11-?20

OS build 19043.1645

Experience Windows Feature Experience Pack 120.2212.4170.0

SMIME&TLS: Windows Crypto API

Zertifikat aktuell und komplett? keine Ahnung -- wie findet man das heraus?

Keine weiteren Sucherheitstools usw (meines Wissens)

Hast du denn auch im Google-Konto > Sicherheit > Drittanbieter-Apps mit Kontozugriff für The Bat! freigegeben?

sehr gute Frage: wie macht man das? -- Ich habe bei Google eine Tabelle gefunden mit Drittanbietern, die Zugriff haben, aber nicht gesehen, wo ich TheBat! Zugriff geben könnte.

sanyok:

Habe TLS mit Port 465 eingestellt und bekomme folgende Meldung:

---------------------------

>23-04-22, 19:21:30: FETCH - Issuer: US, Google Trust Services LLC, GTS CA 1C3.

23-04-22, 19:21:30: FETCH - TLS handshake complete

23-04-22, 19:21:30: FETCH - connected to POP3 server

23-04-22, 19:21:31: FETCH - authenticated (plain)

23-04-22, 19:21:31: FETCH - 0 messages in the mailbox, 0 new

23-04-22, 19:21:32: FETCH - connection finished - 0 messages received

23-04-22, 19:48:06: SEND - sending mail message(s) - 1 message(s) in queue

23-04-22, 19:48:06: SEND - Connecting to SMTP server smtp.gmail.com on port 465

23-04-22, 19:48:06: SEND - Initiating TLS handshake

>23-04-22, 19:48:06: SEND - Certificate S/N: 00D105E69BE55DD2A80A41FE1F523B873F, algorithm: RSA (2048 bits), issued from 4/11/2022 9:17:40 AM to 7/4/2022 9:17:39 AM, for 1 host(s): smtp.gmail.com.

>23-04-22, 19:48:06: SEND - Owner: smtp.gmail.com.

>23-04-22, 19:48:06: SEND - Issuer: US, Google Trust Services LLC, GTS CA 1C3.

23-04-22, 19:48:06: SEND - TLS handshake complete

23-04-22, 19:48:06: SEND - connected to SMTP server

23-04-22, 19:48:06: SEND - WARNING: there were no compatible authentication mechanisms detected

23-04-22, 19:48:06: SEND - sending message to Be******@bluewin.ch

!23-04-22, 19:48:06: SEND - Server reports error. The response is: 5.7.0 https://support.google.com/mail/?p=WantAuthError vw17-20020a170907059100b006e8732d1944sm1874387ejb.5 - gsmtp

23-04-22, 19:48:06: SEND - connection finished - 0 message(s) sent

23-04-22, 19:48:06: SEND - Some messages were not sent - check the log for details

23-04-22, 19:51:30: FETCH - receiving mail messages

23-04-22, 19:51:30: FETCH - Connecting to POP3 server pop.gmail.com on port 995

23-04-22, 19:51:30: FETCH - Initiating TLS handshake

>23-04-22, 19:51:30: FETCH - Certificate S/N: 307844474D38279F0A7C1D4B65435A8D, algorithm: RSA (2048 bits), issued from 4/11/2022 9:16:27 AM to 7/4/2022 9:16:26 AM, for 1 host(s): pop.gmail.com.

>23-04-22, 19:51:30: FETCH - Owner: pop.gmail.com.

>23-04-22, 19:51:30: FETCH - Issuer: US, Google Trust Services LLC, GTS CA 1C3.

23-04-22, 19:51:30: FETCH - TLS handshake complete

23-04-22, 19:51:30: FETCH - connected to POP3 server

23-04-22, 19:51:31: FETCH - authenticated (plain)

23-04-22, 19:51:32: FETCH - 0 messages in the mailbox, 0 new

23-04-22, 19:51:32: FETCH - connection finished - 0 messages received

23-04-22, 19:54:42: SEND - sending mail message(s) - 1 message(s) in queue

23-04-22, 19:54:42: SEND - Connecting to SMTP server smtp.gmail.com on port 587

23-04-22, 19:54:43: SEND - Initiating TLS handshake

>23-04-22, 19:54:43: SEND - Certificate S/N: 5F295964B84D42EC0A80914E2A25593A, algorithm: 1.2.840.10045.2.1 (256 bits), issued from 4/11/2022 9:17:47 AM to 7/4/2022 9:17:46 AM, for 1 host(s): smtp.gmail.com.

>23-04-22, 19:54:43: SEND - Owner: smtp.gmail.com.

>23-04-22, 19:54:43: SEND - Issuer: US, Google Trust Services LLC, GTS CA 1C3.

!23-04-22, 19:54:43: SEND - TLS handshake failure. Invalid server certificate. The certificate cannot be used for this purpose

!23-04-22, 19:54:43: SEND - The server has aborted the connection

23-04-22, 19:54:43: SEND - connection finished - 0 message(s) sent

23-04-22, 19:54:43: SEND - Some messages were not sent - check the log for details

GOOGLE Angaben:

Gmail SMTP Settings

Using the Gmail SMTP settings below, you can configure a third-party email client to send messages via Gmail servers across the public internet. Because Gmail servers are trusted by all other email providers, your messages are unlikely to end up in the spam folder.

Option Description

SMTP Host: smtp.gmail.com

SMTP Port for SSL: 465

SMTP Port for TLS/STARTTLS: 587

SMTP Username: Your full email address (name@domain.com)

SMTP Password: Your email account password

**sanyok**

Zitat von BRX

Habe TLS mit Port 465 eingestellt und bekomme folgende Meldung:

Ich nutze die programminterne Zertifikatsdatenbank.

Zitat von BRX

sehr gute Frage: wie macht man das?

Google-Konto verwalten -> Sicherheit - > Zugriff durch weniger sichere Apps auf AN setzen. Allerdings wird diese Option zum Ende Mai abgeschafft. Mehr dazu unter https://support.google.com/accounts/answer/6010255?hl=de