Passbolt SMTP TLS Problems

Installation Issues
9

Hello @intraUser and @abenest,

So I have reproduced the issue and this is the configuration I would advise you to consider to make passbolt works with self signed certificate :

// Email configuration.
    'EmailTransport' => [
        'default' => [
            'host' => 'relayserver',
            'port' => 25,
            'username' => null,
            'password' => null,
            // Is this a secure connection? true if yes, null if no.
            'tls' => true,
            'context' => [
                'ssl' => [
                    'allow_self_signed' => true
                ]
             ]

Set ssl_allow_self_signed to true to enable self-signed certificates to be accepted.

Setting ssl_verify_peer to false will disable SSL verification. This is not recommended for security matters.

Be sure that your certificate is in /etc/ssl/certs and that the key is in /etc/ssl/private and that your smtp config is matching these paths :

smtpd_tls_cert_file = /etc/ssl/certs/yourcertificate.prem
smtpd_tls_key_file = /etc/ssl/private/yourkey.key

If you’re using postfix, the configuration should be in /etc/postfix/main.cf, if you do any modification in this file, do not forget to reload postfix by doing :

systemctl reload postfix

I hope this configuration will work for you, do not hesitate to give any feedback if it helped or if you still encounter issues.

Cheers,
Gérold.