Bug 428328

Summary:	Cannot send message due to an SSL/TLS error
Product:	[Applications] trojita	Reporter:	Stefan de Konink <stefan>
Component:	SMTP	Assignee:	Trojita default assignee <trojita-bugs>
Status:	RESOLVED DOWNSTREAM
Severity:	critical
Priority:	NOR
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	Other
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description Stefan de Konink 2020-10-27 09:23:51 UTC

SUMMARY


STEPS TO REPRODUCE
1. Type an email, send.

OBSERVED RESULT

"Cannot send message due to an SSL/TLS error

The connection triggered the following SSL errors:

* The issuer certificate of a locally looked up certificate could not be found
* No certificate could be verified"

EXPECTED RESULT

The e-mail should be send.


ADDITIONAL INFORMATION
Git commit: 10033f1b2211ee34a5dad1b2834745d3ab78333f

Comment 1 Stefan de Konink 2020-10-27 09:54:29 UTC

It might be that QT 5.15.1 is related to this problem.

Comment 2 Stefan de Konink 2020-10-31 17:26:59 UTC

I'll close this bug, but I want to specifically state how it was triggered and how it can be "resolved". For years I have been using Postfix with Letsencrypt. Specifically I use the privatekey and certificate from acmetool.

After my last QT and Trojita update this combination did not work anymore resulting in an error. After noticing in strace the problems occured on the Lets encrypt root certificate I wanted to try if changing towards the fullchain certificate would help. It did. This also explains why IMAP was working, because it already used the fullchain file.