You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by Jean-Louis Monteiro <jl...@tomitribe.com> on 2020/12/01 11:17:04 UTC

Fwd: Geronimo Java Mail 1.6 in TomEE 8.0.5 -> TLS 1.2 / 1.3 Support?

If someone has an idea
--
Jean-Louis Monteiro
http://twitter.com/jlouismonteiro
http://www.tomitribe.com


---------- Forwarded message ---------
From: Jean-Louis Monteiro <jl...@tomitribe.com>
Date: Tue, Dec 1, 2020 at 12:16 PM
Subject: Re: Geronimo Java Mail 1.6 in TomEE 8.0.5 -> TLS 1.2 / 1.3 Support?
To: <us...@tomee.apache.org>


Hey Richard,

Thanks for the detailed email.
I have contributed recently to Geronimo Mail 1.6 but to be honest I can't
answer out of my head.

Cesar also worked on it, so he might be able to help.
Other than that, I'm CC'ing Geronimo mailing list. Maybe Romain and others
can help there.

Jean-Louis

--
Jean-Louis Monteiro
http://twitter.com/jlouismonteiro
http://www.tomitribe.com


On Tue, Dec 1, 2020 at 10:55 AM Zowalla, Richard <
richard.zowalla@hs-heilbronn.de> wrote:

> Hi all,
>
> I have updated our TomEE instances to 8.0.5 as (Geronimo) Java Mail 1.6
> replaced the rather outdated (Geronimo) Java Mail 1.4 in this release.
>
> Up to now, we were using
>
>         <dependency>
>             <groupId>com.sun.mail</groupId>
>             <artifactId>jakarta.mail</artifactId>
>             <version>1.6.5</version>
>             <scope>provided</scope>
>         </dependency>
>
> as our mail server is configured to only support TLS 1.2 or TLS 1.3.
> These protocols were not supported by Java Mail 1.4.
>
> I recently tried to migrate to the provided Geronimo Java Mail 1.6
> hoping for better protocol support, but I get java.net.SocketException
> due to a javax.net.ssl.SSLHandshakeException with "Received fatal
> alert: protocol_version".
>
> The full stack trace and related debug output can be found here:
> https://gist.github.com/rzo1/64c23a1d9be752eadf36cf3e1c719ffa)
>
> The mail session is configured as follows:
>
> <?xml version="1.0" encoding="utf-8"?>
> <resources>
>     <Resource id="tomee/mail/demoSMTP" type="javax.mail.Session">
>         mail.debug=true
>         mail.transport.protocol=smtp
>         mail.smtp.starttls.enable=true
>         mail.smtp.starttls.required=true
>         mail.smtp.ssl.enable=false
>         mail.smtp.host=mail.mail-server.com
>         mail.smtp.port=587
>         mail.smtp.auth=true
>         mail.smtp.user=dev@mail-server.com
>         <!-- your password, and not 'mail.smtp.password' -->
>         password=fancyPassword
>     </Resource>
> </resources>
>
> Question:
>
> - Does anybody have an idea how to get Geronimo Java Mail 1.6 talking
> via TLS 1.2 or TLS 1.3 to our mail server?
>
> - Is TLS 1.2 / TLS 1.3 supported in Geronimo Java Mail 1.6?
>
> If this is the wrong list, please give me an advice which list would be
> a better fit.
>
> Thanks in advance,
> Richard Z
>
>
>
>

Re: Geronimo Java Mail 1.6 in TomEE 8.0.5 -> TLS 1.2 / 1.3 Support?

Posted by Romain Manni-Bucau <rm...@gmail.com>.
Hi,

it depends the (ssl) socketfactory and also the jvm which all do not
support tls 1.3 rather than javamail I think

Romain Manni-Bucau
@rmannibucau <https://twitter.com/rmannibucau> |  Blog
<https://rmannibucau.metawerx.net/> | Old Blog
<http://rmannibucau.wordpress.com> | Github <https://github.com/rmannibucau> |
LinkedIn <https://www.linkedin.com/in/rmannibucau> | Book
<https://www.packtpub.com/application-development/java-ee-8-high-performance>


Le mar. 1 déc. 2020 à 12:17, Jean-Louis Monteiro <jl...@tomitribe.com>
a écrit :

> If someone has an idea
> --
> Jean-Louis Monteiro
> http://twitter.com/jlouismonteiro
> http://www.tomitribe.com
>
>
> ---------- Forwarded message ---------
> From: Jean-Louis Monteiro <jl...@tomitribe.com>
> Date: Tue, Dec 1, 2020 at 12:16 PM
> Subject: Re: Geronimo Java Mail 1.6 in TomEE 8.0.5 -> TLS 1.2 / 1.3
> Support?
> To: <us...@tomee.apache.org>
>
>
> Hey Richard,
>
> Thanks for the detailed email.
> I have contributed recently to Geronimo Mail 1.6 but to be honest I can't
> answer out of my head.
>
> Cesar also worked on it, so he might be able to help.
> Other than that, I'm CC'ing Geronimo mailing list. Maybe Romain and others
> can help there.
>
> Jean-Louis
>
> --
> Jean-Louis Monteiro
> http://twitter.com/jlouismonteiro
> http://www.tomitribe.com
>
>
> On Tue, Dec 1, 2020 at 10:55 AM Zowalla, Richard <
> richard.zowalla@hs-heilbronn.de> wrote:
>
>> Hi all,
>>
>> I have updated our TomEE instances to 8.0.5 as (Geronimo) Java Mail 1.6
>> replaced the rather outdated (Geronimo) Java Mail 1.4 in this release.
>>
>> Up to now, we were using
>>
>>         <dependency>
>>             <groupId>com.sun.mail</groupId>
>>             <artifactId>jakarta.mail</artifactId>
>>             <version>1.6.5</version>
>>             <scope>provided</scope>
>>         </dependency>
>>
>> as our mail server is configured to only support TLS 1.2 or TLS 1.3.
>> These protocols were not supported by Java Mail 1.4.
>>
>> I recently tried to migrate to the provided Geronimo Java Mail 1.6
>> hoping for better protocol support, but I get java.net.SocketException
>> due to a javax.net.ssl.SSLHandshakeException with "Received fatal
>> alert: protocol_version".
>>
>> The full stack trace and related debug output can be found here:
>> https://gist.github.com/rzo1/64c23a1d9be752eadf36cf3e1c719ffa)
>>
>> The mail session is configured as follows:
>>
>> <?xml version="1.0" encoding="utf-8"?>
>> <resources>
>>     <Resource id="tomee/mail/demoSMTP" type="javax.mail.Session">
>>         mail.debug=true
>>         mail.transport.protocol=smtp
>>         mail.smtp.starttls.enable=true
>>         mail.smtp.starttls.required=true
>>         mail.smtp.ssl.enable=false
>>         mail.smtp.host=mail.mail-server.com
>>         mail.smtp.port=587
>>         mail.smtp.auth=true
>>         mail.smtp.user=dev@mail-server.com
>>         <!-- your password, and not 'mail.smtp.password' -->
>>         password=fancyPassword
>>     </Resource>
>> </resources>
>>
>> Question:
>>
>> - Does anybody have an idea how to get Geronimo Java Mail 1.6 talking
>> via TLS 1.2 or TLS 1.3 to our mail server?
>>
>> - Is TLS 1.2 / TLS 1.3 supported in Geronimo Java Mail 1.6?
>>
>> If this is the wrong list, please give me an advice which list would be
>> a better fit.
>>
>> Thanks in advance,
>> Richard Z
>>
>>
>>
>>