Error when sending mail alerts with SSL

[CeSinge]

Hello,

When trying to send e-mail alerts (Options/Alerts) using SSL, I get an
error:140770FC: SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol.

I thought this is because my mail server accepts TLS only, and would not accept SSL, what the client apparently attempts to do. However, the message refers to SSL23 (from the client, I presume), and the SSLv23 API should also negotiate with a TLSv1 server - or at least that's what I understand.

Would there be something else to it? Or should I change my mail server to SSLv2 (which I could consider given it's my own). I can provide a trace, if needed.
Thank you,

[Mark]

Hi CeSinge,

I'm not certain of how the compatibility works with TLS... I would suggest trying to enable your mail server for SSL, and see if that doesn't resolve the problem.

[CeSinge]

Mark,

The problem with SSL is that it is way less secure than TLS. SSLv1 is, from a security point of view, really outdated, and should not be accepted by a server. Even SSLv2 has a lot of known security vulnerabilities, and it's use should be discouraged. So just accepting SSLv2 on a mail server for the purpose of accepting alerts from FM means downgrading the security level of the server as a whole.

So I think it is worthwhile for you to revisit this and make TLS work correctly, and possibly add a TLS box right below the SSL checkbox (and ideally even add a reminder that SSL should not be used unless necessary.)

Just my 2c on this (being an IT security consultant, professionally).