Kibana email connector "unable to verify the first certificate"

[d.silwon (Daniel)]

Dears,

ELK in version: 7.16

I want to test and deploy email notification in Kibana. During configuration of email connector I've got error message like this:

{"type":"log","@timestamp":"2022-05-17T08:51:18+02:00","tags":["warning","plugins","actions"],"pid":1283,"message":"action execution failure: .email:e1c91f90-d5a4-11ec-b6b5-cd23b20498cd: MailConnector: error sending email: unable to verify the first certificate"}
{"type":"log","@timestamp":"2022-05-17T08:51:50+02:00","tags":["warning","plugins","actions"],"pid":1283,"message":"action execution failure: .email:3a7bf564-0d3d-440b-baab-859289d0a9e7: ITCSMTP: error sending email: 139950185228224:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
{"type":"log","@timestamp":"2022-05-17T08:51:50+02:00","tags":["error","plugins","actions"],"pid":1283,"message":"Action '3a7bf564-0d3d-440b-baab-859289d0a9e7' failed and will not retry: error sending email"}

my Kibana configuration file:

server.port: 5601

server.host: "192.168.1.120"
server.publicBaseUrl: "https://192.168.1.120"

server.name: "Kibana"

elasticsearch.hosts: ["https://elastic01:9200", "https://elastic02:9200", "https://elastic03:9200"]

server.ssl.enabled: true

server.ssl.certificate: /etc/kibana/certs/kibana.crt

server.ssl.key: /etc/kibana/certs/kibana.key

elasticsearch.ssl.certificateAuthorities: [ "/etc/kibana/certs/ca.crt" ]

elasticsearch.ssl.verificationMode: full

logging.dest: /var/log/kibana/kibana.log

logging.rotate:
   enabled: true
   everyBytes: 10485760
   keepFiles: 10

xpack.encryptedSavedObjects.encryptionKey: 9620034d3aecbb422b189c5b181d5f93

Do you have any experience with email connector configuration and such errors?

Best Regards,
Dan

[d.silwon (Daniel)]

any one?

[d.silwon (Daniel)]

This is my configuration in Kibana:

and error which show during test:

Kibana log show:

{"type":"log","@timestamp":"2022-05-19T06:57:19+02:00","tags":["warning","plugins","actions"],"pid":40791,"message":"action execution failure: .email:3a7bf564-0d3d-440b-baab-859289d0a9e7: ITCSMTP: error sending email: 140169472018368:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
{"type":"log","@timestamp":"2022-05-19T06:57:19+02:00","tags":["error","plugins","actions"],"pid":40791,"message":"Action '3a7bf564-0d3d-440b-baab-859289d0a9e7' failed and will not retry: error sending email"}
{"type":"log","@timestamp":"2022-05-19T06:57:19+02:00","tags":["warning","plugins","actions"],"pid":40791,"message":"action execution failure: .email:3a7bf564-0d3d-440b-baab-859289d0a9e7: ITCSMTP: error sending email: 140169472018368:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
{"type":"log","@timestamp":"2022-05-19T06:57:19+02:00","tags":["error","plugins","actions"],"pid":40791,"message":"Action '3a7bf564-0d3d-440b-baab-859289d0a9e7' failed and will not retry: error sending email"}

test smtp auth without SSL:

telnet A.B.C.20 25
Trying A.B.C.20...
Connected to A.B.C.20.
Escape character is '^]'.
220 itcsr1mta01.rdc.itcard.pl ESMTP ready.
> EHLO A.B.C.20
250-itcsr1mta01.rdc.itcard.pl Hello A.B.C.20 [A.B.C.120]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-PIPE_CONNECT
250-AUTH PLAIN LOGIN
250-STARTTLS
250 HELP
> AUTH LOGIN
334 VXNlcm5hbWU6
> dGVjcF90ZXN1WHJkYy7ddGehvwQucGw=
334 UGFzc3dvcmQ6
> L1hMKk5Hbm03bz0hRyNra7ViLN=
235 Authentication succeeded

[d.silwon (Daniel)]

additional configuration in kibana.yml file solve this issue:

xpack.actions.customHostSettings:
  - url: smtp://A.B.C.20
    smtp:
      ignoreTLS: true

Any idea why configuration directly from Kibana does not work?

[ibra_013 (Ibra13)]

Hi,

same question here.