IT46596: CONTROL CENTER MONITOR IS NOT WORKING WITH SMTP TLS

APAR status

• Closed as program error.

Error description

• Control Center Monitor is having issues in connecting with TLS
  enabled Email server. SMTP server certificate is added in the
  CCM trust-store. SMTP server has 2 ports for the secure
  connection 465 (is now deprecated) & 587.
  When port 465 is used for the TLS connection it's working
  without any issue. Since, this port has been deprecated.
  So port 587 is used for the TLS connection.
  
  
  In test setup we enabled the secure connection, and observed the
  same behavior. When we attempt to send a test mail using port
  587 with a TLS connection, it fails and produces the below error
  message in the logs.
  
  "Caused by: javax.net.ssl.SSLException: Unsupported or
  unrecognized SSL message
  at java.base/sun.security.ssl.SSLSocketInputRecord.handleUnknow
  nRecord(UnknownSource)"
  
  Also, if test mail is sent by unchecking the "Enable TLS" option
  using secure port 587 it works but sending information in plain
  text which is not valid in a secure connection.
  
  Error traces present in the logs:
  
  30 May 2024 02:00:10,430 41267869
  [AutomatedReport-DefaultQuartzScheduler_Worker-1] ERROR
  EmailService - CEML011E Error Sending Email. Details: 2030 May
  2024 02:00:10,430 41267869
  [AutomatedReport-DefaultQuartzScheduler_Worker-1] ERROR
  EmailService - CEML011E Error Sending Email. Details: 2030 May
  2024 02:00:10,430 41267869
  [AutomatedReport-DefaultQuartzScheduler_Worker-1] ERROR
  EmailService - Could not connect to SMTP host:
  smtp.solutions.corelogic.com, port: 25 Stack Trace:
  javax.mail.MessagingException: Could not connect to SMTP host:
  smtp.solutions.test.com, port: 25;  nested exception is:
  javax.net.ssl.SSLException: Unsupported or unrecognized SSL
  message at com.sun.mail.smtp.SMTPTransport.openServer(SMTPTrans
  port.java:2211)at com.sun.mail.smtp.SMTPTransport.protocolConnec
  t.java:740)at javax.mail.Service.connect(Service.java:366) at co
  commerce.scc.agent.services.action.EMailService.sendMailInterna
  l(EMailService.java:537)at com.sterlingcommerce.scc.agent.servic
  sendMail(EMailService.java:514)at org.quartz.core.JobRunShell.ru
  .quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPoo
  l.java:573)Causedby: javax.net.ssl.SSLException: Unsupported or
  message at java.base/sun.security.ssl.SSLSocketInputRecord.hand
  leUnknownRecord(UnknownSource) at
  java.base/sun.security.ssl.SSLSocketInputRecord.decode(Unknown
  Source) at
  java.base/sun.security.ssl.SSLTransport.decode(Unknown Source)
  at java.base/sun.security.ssl.SSLSocketImpl.decode(Unknown
  Source) at java.base/sun.security.ssl.SSLSocketImpl.readHandsha
  keRecord(UnknownSource)
  

Local fix

• STRRTC - MFT-15959
  DK / AK
  Circumvention: None
  

Problem summary

• SCCM not able to use SMTP TLS
  

Problem conclusion

• Added one mail configuration property for secure connection
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STR CONTROL CEN

• Fixed component ID

  5725D0200

Applicable component levels