SSL connect error: error:0A00010B:SSL routines::wrong version number

[TesterCHT]

How can I set zabbix to send email with TLS 1.2 only
Email provider Generic SMTP SMTP port 587, Authentication username password
Media type test failed. SSL connect error: error:0A00010B:SSL routines::wrong version number
TLS1.2 is enabled on our exchange server, it works with other servers

[Haroldsmith]

How can I set zabbix to send email with TLS 1.2 only
Email provider Generic SMTP SMTP port 587, Authentication username password
Media type test failed. SSL connect error: error:0A00010B:SSL routines::wrong version number
TLS1.2 is enabled on our exchange server, it works with other servers

Hello,

To set Zabbix to send email with TLS 1.2 only, you need to make sure that your Zabbix server is using a version that supports TLS 1.2. Additionally, you will need to configure the Zabbix server's email settings to use TLS 1.2 when connecting to your email provider.

Here are the general steps to accomplish this:

Ensure that your Zabbix server is using a version that supports TLS 1.2. Check the Zabbix documentation or consult with your system administrator to verify this.

Access the Zabbix server configuration file. Depending on your system, the configuration file is typically located at /etc/zabbix/zabbix_server.conf or /usr/local/etc/zabbix_server.conf.

Open the configuration file in a text editor and locate the [smtp] section. MyAccountAccess

Within the [smtp] section, set the appropriate parameters to enable TLS 1.2. You may need to add or modify the following lines:

StartTLS=1
TLSConnect=2
TLSAccept=2
TLSVerifyPeer=1
TLSCAFile=/path/to/ca_certificate.pem

Note: Replace /path/to/ca_certificate.pem with the path to the CA certificate file on your system. This file should contain the trusted root certificate(s) for your email provider.

Save the configuration file and exit the text editor.

Restart the Zabbix server for the changes to take effect. The command to restart the Zabbix server will vary depending on your operating system. For example, you can use systemctl restart zabbix-server on systems that use systemd.

Once you have made these changes, Zabbix should use TLS 1.2 when connecting to your email provider. If you still encounter SSL connect errors, ensure that the email provider's server supports TLS 1.2 and that the port you are using (587 in this case) is correct. Additionally, double-check the username and password for authentication.

I hope the information helps you.

Thanks with regards,
Haroldsmith