Re: correct STARTTLS syntax for email alerts?

[address@hidden]

Thanks for data.

I tried to reproduce the problem with the following configuration and it seems 
to work correctly:

set mailserver mail8.networktest.com port 587
        username "test" password "123456"
        using tls

I get "Mail: Mailserver response error -- 535 5.7.8 Error: authentication 
failed" but that is expected (i didn't use real credentials). The credentials 
are send by monit past the STARTTLS command and the server didn't indicate the 
STARTLS error.

Please can you verify you monit is compiled with SSL?:

        monit -V




> On 30 Jul 2018, at 20:53, David Newman <address@hidden> wrote:
> 
> On 7/30/18 10:50 AM, address@hidden wrote:
> 
>> The configuration looks fine, please can you send Monit log?
> 
> It's just a lot of entries like this. I deliberately stopped the Mailman
> service to try to force an email alert from Monit.
> 
> Thanks in advance for any troubleshooting clues.
> 
> dn
> 
> [PDT Jul 29 16:03:50] info     : Starting Monit 5.25.2 daemon with http
> interface at [localhost]:2812
> [PDT Jul 29 16:03:50] info     : 'mail8.networktest.com' Monit 5.25.2
> started
> [PDT Jul 29 16:03:55] error    : 'mailman' service restarted 1 times
> within 1 cycles(s) - alert
> [PDT Jul 29 16:03:55] error    : Mail: Mailserver response error -- 530
> 5.7.0 Must issue a STARTTLS command first
> [PDT Jul 29 16:03:55] error    : Aborting event
> [PDT Jul 29 16:03:55] info     : 'mailman' process is running after
> previous restart timeout (manually recovered?)
> [PDT Jul 29 16:03:55] error    : Mail: Mailserver response error -- 530
> 5.7.0 Must issue a STARTTLS command first
> [PDT Jul 29 16:03:55] error    : Aborting event
> [PDT Jul 29 16:04:30] error    : 'mailman' process is not running
> [PDT Jul 29 16:04:30] error    : Mail: Mailserver response error -- 530
> 5.7.0 Must issue a STARTTLS command first
> [PDT Jul 29 16:04:30] error    : Aborting event
> [PDT Jul 29 16:04:30] info     : 'mailman' trying to restart
> [PDT Jul 29 16:04:30] info     : 'mailman' start:
> '/usr/local/etc/rc.d/mailman start'
> [PDT Jul 29 16:05:21] error    : 'mailman' service restarted 1 times
> within 1 cycles(s) - alert
> [PDT Jul 29 16:05:21] error    : Mail: Mailserver response error -- 530
> 5.7.0 Must issue a STARTTLS command first
> [PDT Jul 29 16:05:21] error    : Aborting event
> [PDT Jul 29 16:05:21] info     : 'mailman' process is running with pid 18239
> [PDT Jul 29 16:05:21] error    : Mail: Mailserver response error -- 530
> 5.7.0 Must issue a STARTTLS command first
> [PDT Jul 29 16:05:21] error    : Aborting event
> [PDT Jul 29 16:05:21] info     : 'mailman' process is running after
> previous restart timeout (manually recovered?)
> [PDT Jul 29 16:05:21] error    : Mail: Mailserver response error -- 530
> 5.7.0 Must issue a STARTTLS command first
> [PDT Jul 29 16:05:21] error    : Aborting event
> 
> 
> 
> 
> 
>> 
>> Best regards,
>> Martin
>> 
>> 
>>> On 30 Jul 2018, at 01:16, David Newman <address@hidden> wrote:
>>> 
>>> FreeBSD 11.2, monit-5.25.2 compiled from ports with SSL/TLS support
>>> 
>>> What's the correct syntax for monit to use STARTTLS when sending email
>>> alerts?
>>> 
>>> Currently monit logs this error:
>>> 
>>> [PDT Jul 29 16:05:21] error    : Mail: Mailserver response error -- 530
>>> 5.7.0 Must issue a STARTTLS command first
>>> 
>>> Using this configuration in /usr/local/etc/monitrc:
>>> 
>>> set ssl options {
>>>       version: auto
>>>       verify: enable
>>>       pemfile: /etc/ssl/certs/mail.example.com/everything.pem
>>> }
>>> 
>>> set mailserver mail.example.com
>>>     port 587
>>>       username "address@hidden"
>>>     password="wouldnt-you-like-to-know"
>>>       using ssl
>>> 
>>> check process mailman with pidfile
>>> /usr/local/mailman/data/master-qrunner.pid
>>>       group mailman
>>>       start program = "/usr/local/etc/rc.d/mailman start"
>>>       stop program = "/usr/local/etc/rc.d/mailman stop"
>>>       if 1 restarts within 1 cycles then alert
>>> 
>>> Thanks!
>>> 
>>> dn
>>> 
> 
> -- 
> To unsubscribe:
> https://lists.nongnu.org/mailman/listinfo/monit-general