Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

The email reports are broken #15065

Closed
david-colombo opened this issue Oct 28, 2019 · 3 comments
Closed

The email reports are broken #15065

david-colombo opened this issue Oct 28, 2019 · 3 comments
Labels
duplicate For issues that already existed in our issue tracker and were reported previously.

Comments

@david-colombo
Copy link

Hey,

It seems like either Zend Mail itself or the implementation in Matomo is broken.

The email reports do not work in version "3.11.0" because of the following OpenSSL error error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed

Caused in /var/www/html/analytics.example.com/libs/Zend/Mail/Protocol/Smtp.php(206)

sudo ./console core:test-email test@example.com
Output

[Zend_Mail_Protocol_Exception]  
  Unable to connect via TLS

The CA path in php.ini and environment variables are already set and neither Openssl itself or PHPmailer have issues with validating SSL/TLS certificates.

This happened on multiple systems running

  • Ubuntu 16.04.6 LTS

  • Matomo 3.11.0

  • PHP 7.2.24

  • OpenSSL 1.1.1d 10 Sep 2019

All available updates of Ubuntu, Matomo, PHP & OpenSSL are installed.

The only recommendation I saw in the forum was to "just disable certificate verification", but I'm pretty sure there's a better fix for that!
@Findus23
Copy link
Member

The ideal solution one day would be #14841

But until then can you maybe make sure that used root certificate is valid?

But maybe the server is using a "too new" version, so that might also not work.

@david-colombo
Copy link
Author

The ideal solution one day would be #14841

Oh yep :D That would be the best solution!

But until then can you maybe make sure that used root certificate is valid?

But maybe the server is using a "too new" version, so that might also not work.

Well, I'm not quite sure what Zend Mail is doing, because neither with OpenSSL itself nor with PHPMailer I have this issue.

So in fact OpenSSL & PHPmailer can successfully verify the certificate of the smtp server.

And because Zend Mail is also supposed to use OpenSSL I think it should theoretically work.
But as experienced it does not...

@tsteur
Copy link
Member

tsteur commented Oct 28, 2019

@davidcolombogit @Findus23 I'll close this issue as we have #14841 and we have it scheduled for Matomo 4 already. Hope that's fine. Feel free to comment otherwise and we can reopen in case there's an easy fix for Zend Mail (PR welcome)

@tsteur tsteur closed this as completed Oct 28, 2019
@tsteur tsteur added the duplicate For issues that already existed in our issue tracker and were reported previously. label Oct 28, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
duplicate For issues that already existed in our issue tracker and were reported previously.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@tsteur @Findus23 @david-colombo