阿里云Centos6.X发邮件遇到的各种问题,cenots邮件服务器故障解答( 二 )


set smtp-auth-password=xxxxx
set smtp-auth=login
set smtp-use-starttls
set ssl-verify=ignore
set nss-config-dir=/etc/pki/nssdb/
[root@linux-node2 ~]# echo 'hello' |mail -v -s "test" yueyuancun@163.com
Resolving host smtp.163.com . . . done.
Connecting to 123.125.50.133 . . . connected.
Error in certificate: Peer's certificate issuer is not recognized. ##没有对端的证书 
Comparing DNS name: "*.163.com"
SSL parameters: cipher=AES-128-GCM, keysize=128, secretkeysize=128,
issuer=CN=GeoTrust SSL CA - G3,O=GeoTrust Inc.,C=US
subject=CN=*.163.com,O="NetEase (Hangzhou) Network Co., Ltd",L=HangZhou,ST=ZheJiang,C=CN
220 163.com Anti-spam GT for Coremail System (163com[20141201])
>>> EHLO linux-node2
250-mail
250-PIPELINING
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250-coremail 1Uxr2xKj7kG0xkI17xGrU7I0s8FY2U3Uj8Cz28x1UUUUU7Ic2I0Y2UFVHs-cUCa0xDrUUUUj
250-STARTTLS
250 8BITMIME
>>> AUTH LOGIN
334 dXNlcm5hbWU6
>>> eXVleXVhbmN1bkAxNjMuY29t
334 UGFzc3dvcmQ6
>>> aGVsbG9uaWhhbzE5ODkxMA==
535 Error: authentication failed
smtp-server: 535 Error: authentication failed
"/root/dead.letter" 11/299
. . . message not sent. ##邮件没有发出去
至此,网上的case都说能收到邮件,但是我这就是收不到,那就根据错误来解决呗!!!搞证书

[root@linux-node2 ~]# mkdir -p /root/.certs/
[root@linux-node2 ~]# echo -n | openssl s_client -connect smtp.163.com:465 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ~/.certs/163.crt
depth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA
verify return:1
depth=1 C = US, O = GeoTrust Inc., CN = GeoTrust SSL CA - G3
verify return:1
depth=0 C = CN, ST = ZheJiang, L = HangZhou, O = "NetEase (Hangzhou) Network Co., Ltd", CN = *.163.com
verify return:1
DONE
[root@linux-node2 ~]# certutil -A -n "GeoTrust SSL CA" -t "C,," -d ~/.certs -i ~/.certs/163.crt
[root@linux-node2 ~]# certutil -A -n "GeoTrust Global CA" -t "C,," -d ~/.certs -i ~/.certs/163.crt
[root@linux-node2 ~]# certutil -L -d /root/.certs
Certificate Nickname                                      Trust Attributes
                                                   SSL,S/MIME,JAR/XPI
GeoTrust SSL CA                                          C,,  
[root@linux-node2 ~]# cd /root/.certs/
[root@linux-node2 .certs]# certutil -A -n "GeoTrust SSL CA - G3" -t "Pu,Pu,Pu"  -d ./ -i 163.crt
Notice: Trust flag u is set automatically if the private key is present.
[root@linux-node2 .certs]# cd 
[root@linux-node2 ~]# vim /etc/mail.rc 
set from=admin@163.com
set smtp="smtps://smtp.163.com:465"
set smtp-auth-user=admin@163.com
set smtp-auth-password=xxxxx
set smtp-auth=login
set smtp-use-starttls
set ssl-verify=ignore
set nss-config-dir=/root/.certs
[root@linux-node2 ~]# echo 'hello' |mail -v -s "test" admin@163.com
Resolving host smtp.163.com . . . done.
Connecting to 123.125.50.132 . . . connected.
Comparing DNS name: "*.163.com"
SSL parameters: cipher=AES-128-GCM, keysize=128, secretkeysize=128,
issuer=CN=GeoTrust SSL CA - G3,O=GeoTrust Inc.,C=US

推荐阅读