Issues in sending emails
Hi, I have installed the hotfix-7496 for resolving IE 11 UI issues in our application(PRPC v6.2 SP2). After the hotfixes installation, we got issues in sending emails. We raised a SR and from support team we got another hotfix 6029. We installed this hotfix in Development and QA servers. Now the email issue is resolved. But in the description of the hotfix 6029, it was mentioned like, we should not install this hotfix in Production server as it will lower the security levels. We raised this concren to Support team and they replied back saying "Please configure corresponding application server's trust store to work correctly such that STARTTLS-enabled Email Infrastructure. This requires one populating the application server's trust store to accept the SMTP server's security certificate." In tomcat application server, we can able to register the certificate. Can anyone tell us how to link this with Pega application's Key store and hot to resolve this email issue ?
Message was edited by: Vidyaranjan Av
Pegasystems Inc.
IN
It seems HFix-5180 is installed in your system , which enables STARTTLS support in java mail.
When the server supports STARTTLS, the PRPC mail client will now respond to the STARTTLS message and
then do server certificate verification. If the user does not have their application server configured correctly for secure connections with their chosen SMTP server,
so the root certificate used by the SMTP server is not in the trust store of the Application Server.
Prior to installing this hotfix, the SMTP server attempted STARTTLS and the client did not respond in kind,
so the server was allowing the conversation to continue without security.
In case you do not want to configure their application server correctly and would prefer to revert the SMTP client functionality to ignoring requests for STARTTLS,
you can install HFix-6029 hotfix.
HFix-6029 will disabled the STARTTLS support for all EmailAccount records on the system.
In case you want to have support for STARTTLS, then you need to configure corresponding application server's trust store to work correctly such that
STARTTLS-enabled Email Infrastructure .