TLS 1.2

rogerversatile

Hello Fellow Forumers,I currently use osTicket 1.10.1 at my office and we recently changed the TLS version on our Exchange Server to TLS1.2The change, as expected has broken the comm between the Mail and OsTicket Server.Can someone please guide me through making the TLS change in osTicket? I figure it's something that needs to be done via the CLI.Thanks in advance

KevinTheJedi

@[deleted]It should function out of the box. What error messages are you receiving? Have you enable Plain Auth/Clear-text Auth?Also, Please don't use 1.10.1 as we have released security patches since then (some of them very serious). The most recent update is 1.10.4 available here:http://osticket.com/downloadCheers.

KevinTheJedi

@[deleted]You could also try this fix here:https://github.com/osTicket/osTicket/issues/3726#issuecomment-344398410Cheers.

rogerversatile

Thanks @[deleted] I'll proceed with your recommendations. Sample of the error messages received:

mso-fareast-font-family:"Times New Roman";mso-ansi-language-US;mso-fareast-language:

EN-US;mso-bidi-language-SA">osTicket is having trouble fetching emails from

the following mail account:

User: (omitted)

Host: (omitted)

Error: TLS/SSL failure for (host-omitted): SSL negotiation failed

128 consecutive errors. Maximum of 5 allowed

This could be connection issues related to the mail server. Next delayed

KevinTheJedi

@[deleted]The errors provided doesn't mean that it's a TLS issue. Here are some similar issue reports with suggested fixes:- https://github.com/osTicket/osTicket/issues/4252- https://github.com/osTicket/osTicket/issues/3726#issuecomment-344398410Cheers.

rogerversatile

@[deleted] , thanks. we noticed the issue immediately after we made the change on the mail server to use only TLS 1.2I'm reviewing the info you sent me now.

elysec25

We're using DreamHost for osTicket. We started having a problem with incoming emails to osTicket getting stuck in the DreamHost webmail inbox (outgoing still seems to work correctly). Their support agent suspects it's because they recently updated to TLS 1.2.

Can anyone confirm that this is a logical hypothesis?

ntozier

@elysec25
This is an old thread about an end of life version of osTicket.
Please do not be a necromancer and start your own thread after reading and following the posting guidelines located in this thread: Please read before requesting assistance. The more information you give us the better we will be able to assist you. Thank you.

Killing zombie thread with a head shot.