Home › Forums › implementation › Implementation discussion ›

Does openvpms's mailservice (the Spring JavaMailsenderimpl, I think) allow for SSL/TLS

Submitted by Ben_Charlton on Thu, 22/03/2012 - 11:51
in

 

We use a smtp server which requires SSL/TLS.  Which I know the springframework supports,

I attempted to implement via applicationcontext...

by adding

<bean id="mailSender" class="org.openvpms.web.component.service.MailService" scope="prototype">

 

<property name="protocol" value="smtps"></property>        
<property name="javaMailProperties">
        <props>
            <prop key="mail.smtp.starttls.enable">true</prop>
        </props>
        </property>
</bean>
 
I assumed auth was set to true if u input a username and pass in  the host config inside the webapp.
 
FYI we use googleapps as the mailsender...
Incoming Mail (POP3) Server - requires SSL: pop.gmail.com
Use SSL: Yes
Port: 995
Outgoing Mail (SMTP) Server - requires TLS3 or SSL: smtp.gmail.com (use authentication)
Use Authentication: Yes
Port for TLS/STARTTLS: 587
Port for SSL: 465
Account Name: your full email address (including @gmail.com or@your_domain.com)
Email Address: your email address (username[at]gmail[dot]com orusername[at]your_domain[dot]com)
Password: your Gmail password

 

Thanks anyone 

Ben

‹ Starting out Does openvpms's mailservice (the Spring JavaMailsenderimpl, I think) allow for SSL/TLS ›

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Re: Does openvpms's mailservice (the Spring ...

Submitted by bencharlton (not verified) on Thu, 22/03/2012 - 13:48.

I've tried a few more configuration options as recommended by Sun

 

   <bean id="mailSender" class="org.openvpms.web.component.service.MailService" scope="prototype">
      <property name="javaMailProperties">
        <props>
              <prop key="mail.smtp.starttls.enable">true</prop>
<prop key="mail.smtps.auth">true</prop>
<prop key="mail.debug">true</prop>
<prop key="mail.transport.protocol">smtps</prop>
        </props>
        </property>
</bean>
 
This fails with a plaintext authentication error.  Unfortunately using the web interface doesnt allow you to watch the debug console.  On port 465 and 587
 
Ill keep trying.

Re: Does openvpms's mailservice (the Spring ...

Submitted by tanderson on Thu, 22/03/2012 - 15:24.

Have you set the Mail Port for the Practice Location in Administration -> Organisation?

You should be able to see the debug output in the logs in <TOMCAT_HOME>/logs.

-Tim

Re: Does openvpms's mailservice (the Spring ...

Submitted by Ben_Charlton on Thu, 22/03/2012 - 16:43.

The above bean actually worked on port 465...I just forgot you needed to logout when you made organizational changes...

*SLAP SELF*

I would make the point that internal smtp plain text authenticating SMTP server are fine if your accessing them locally....but I am not sure I would want my business grade smtp internet service using a plain text port 25 service....

Is it worthwhile considering moving some authentication options into the UI...I realize it is an implementation issue, but 

I did have such a service available until last week...and i just squashed it, after a hacker managed to spoof our primary email address eg<info[at]oursurgery.com[dot]au> and somehow bypassed my spf, callerid and domainkeys checks, the first I knew that we had been spoofed was the 10000 Mail returned to sender emails we got, that appeared on our tertiary backup mail reciever. The only reason I can see that the returns ended up there was that, that service allows plain txt on port 25 authentication, and we only have a default address setup in that server in case our primary mail server (self hosted) implodes or we decide to not pay telstra the tithe's they feel they deserve.

 

Regards
 
Ben 
OpenVPMS Installer and Helper 
Ph: +61423044823 
Email: info[at]charltonit.com[dot]au

Re: Does openvpms's mailservice (the Spring ...

Submitted by tanderson on Wed, 28/03/2012 - 08:55.

I've raised a JIRA for this: https://openvpms.atlassian.net/browse/OVPMS-1111

Feel free to fund it ;)

-Tim

Syndicate content