Ssl – Exchange 2003 SMTP SSL and various email clients

appleexchange-2003smtpsslthunderbird

This Exchange 2003 server sits behind a firewall with a virtual SMTP server listening on port 465 and attached an SSL certificate from Comodo to the virtual server. However, when trying to send from Apple Mail.app 4.x and Outlook 2011 for Mac, it never completes the connection (time out). Oddly though, the same setup works with Thunderbird. My question is:

  • Does it matter if the friendly name of the certificate is different from the internal hostname? The machine has 2 hostnames: external and internal. The official SSL is using the external name.
  • When using a self-signed certificate with the same name as the internal, I still can't send from the Mail.app and Exchange clients but I can with Thunderbird.

Best Answer

I believe your problem lies in using a non standard port.

RFC 4409, RFC 3207, and RFC 2476 may help you.

Almost all mail routing (at least as much as I've dealt with it) is done on port 25 using TLS over standard SMTP, and the clients probably won't send on another port unless you tell it to.

There's also some info from this site:

Port 465 shows up Appendix A of the 1996 non-standard standard The SSL Protocol Version 3.0 as "Simple Mail Transfer Protocol with SSL". Unfortunately, it's not registered for SMTPs, it's registered for URD - "URL Rendesvous Directory for SSM" by Cisco. The recommended approach, at least for authentication, is to use START TLS encryption on submission port 587.

The link in the above quote is dead, but this one seems to work.

Another informative forum link here.

Related Topic