How to get SMTP working with self-signed LE cert?

[alex32]

My LE cert expired few weeks ago, and since then SMTP emails don’t work anymore. In Cloudflare I had to switch SSL to Full to bring back my website (it was Strict )
Now with self-signed cert I tried to change SMTP port and to use STARTTLS as shown on Emails > List, but didn’t work.
While sending emails SMTP return a timeout error - using ThunderBird and web-mail.
The line below return a ssl wrong version, I guess is it due to the self-signed cert?

How do I get back my SMTP mail? (I don’t want to use unsecure port 25 )

openssl s_client -starttls smtp -showcerts -connect mail.website.com:587 -servername mail.website.com

CONNECTED(00000003)
40674E1AF57F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:…/ssl/record/ssl3_record.c:354:

no peer certificate available

No client certificate CA names sent

SSL handshake has read 244 bytes and written 351 bytes
Verification: OK

New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)

Many thanks

Cannot Connect To Mail Server With Port 587

this ? Server certificate subject=CN = myhiddenserver issuer=C = US, O = Let’s Encrypt, CN = R3 No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: ECDSA Server Temp Key: X25519, 253 bits SSL handshake has read 4435 bytes and written 424 bytes Verification: OK New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 256 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not s…

6 - Self-signed SSL error on Outlook/Thunderbird

After creating an email account in CyberPanel some users would like to configure their email accounts to third party email clients such as Outlook or Thunderbird. Both these clients have auto-discover functionality, this functionality will try to automatically configure your email settings so that end-user won’t have to do anything. For example, if on Thunderbird I configure: User: [email protected] Password: Thunderbird may suggest the following settings: Server hostname: mail.cyb…

[shoaibkk]

do one this disable cf and issue SSL on mail domain then let me know

[alex32]

Hi Shoaib

Thanks for your reply, done it. Still not working.

But there are few problems:

• I need CFlare
• When I initially issued LE cert (for all my domains), CFlare was enabled, and all cert was issued (about 80d long each)