Office 365 IMAP SSL negotiation failed

egoitz

Hi,
We are setting up a new osticket (v 1.15.4) server in ubuntu 21, and we are getting an error when configuring IMAP settings for an office 365 mail account:

TLS/SSL failure for outlook.office365.com: SSL negotiation failed

Settings:

outlook.office365.com
993
IMAP+SSL

I have checked that IMAP is enabled and working fine for that email.
SMTP works fine.

I can't find a solution for this, could you help me?

Thanks in advance.

Daedalus01

I would check firewall polices to verify that the OS Ticket server can reach the server on that port. Most business grade firewalls do not allow port 993 by default.

ntozier

That and those settings are correct.

Vitoie

not working for me either. something to do with MS changes back in november I believe

KevinTheJedi

@Vitoie

Try forcing ssl:// at the beginning of the hostname. So instead of outlook.office365.com you put ssl://outlook.office365.com and retest.

Cheers.

Vitoie

KevinTheJedi Hi, sorry I missed your reply, no it did not work at all

KevinTheJedi

@Vitoie

It’d be best to contact your mail provider then. They should have access to the logs and should be able to point you to the issue. Since we have zero visibility to the logs we cannot really assist except to make guesses.

Cheers.

Vitoie

KevinTheJedi Provider is Microsoft365, and it stopped working since the OAuth changes done by them. will there be any changes done to osTicket to ease this? I have seen posts from 2020 that say it is being finalised. I know I am not alone as I have been in testing solutions with other techs. If I missed any documentation, please feel free to refer me to it and I will try it again. I really love osTicket.

KevinTheJedi

@Vitoie

We are still working on it. OAuth2.0 support required us to make major changes to the backend of plugins as well as writing a completely new plugin for OAuth2.0 authentication that can be used for many things, not just email authentication. Also, this requires major changes to the core code and includes a completely new package/dependency so it's a ton of moving parts that need to be tested. Since this includes major changes to the core of the software (email fetching/sending, etc.) this has to be done right.

Cheers.

Tinnitus

Hi, everyone,
Microsoft provides support for "Basic Authentication" on October 1st, 2022.
Will the plugin be available by then?
Does the plugin only come for Osticket 2.0 or also for the other versions?

Source:
https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-and-exchange-online-september-2021-update/ba-p/2772210

KevinTheJedi

@Tinnitus

I cannot promise anything but we definitely hope to have it out way before then. It's being developed for legacy code (current versions). v2.0 will have it's own plugins.

Cheers.

dfite

Interesting I'm also in O365 and had no issues setting this up. I used a shared mailbox with a plan 1 license and using a generated "application password."

Vitoie

dfite

Yes, the issue in my specific case is I am on a Hybrid exchange and it does not allow me to do the App Password. thanks for assuring me it works with the App password anyway as now I can ask around if we can do anything about it for this account only.

Cazz0r

Did you have any luck with this Vitoie ? We're in the same situation. Hybrid exchange with a shared mailbox. Thinking we may need to wait until OAuth changes come to osTicket...

Vitoie

Cazz0r i did found something here, mine isn't shared but a licensed mailbox. https://forum.osticket.com/d/100724-m365-can-not-authenticate-to-imap-server-authenticate-failed

reycasper

Does anyone who has a way around on this?, we are also having the same issue.

ntozier

reycasper Does anyone who has a way around on this?, we are also having the same issue.

You do not have to use an app password, but you would need to enable IMAP and disable 2fa on that account.