STARTTLS UPOPMAIL error -7

 newinstance "UPOPMAIL", mailHandler

mailHandler->SetSecurity("SMTP=UStartTLSSMTPUSE=MAND", "")
mailHandler->SetSecurity("SMTP=UAuthLoginSMTPUSE=MAND", "user=mailpassword=password")
mailHandler->LogonSMTP("smtp.office365.com+587", "", "") ; -> $status = -7
mailHandler->GetSMTPResponse(code, message) ; -> code = 250

Hi Alejandro,

I've always used STUNNEL as proxy server for Uniface UPOPMAIL to connect to Office365.

Are you sure current Uniface TLS implementation is supported from current Office365 SMTP service?

Regards,
Gianni

 newinstance "UPOPMAIL", mailHandler

mailHandler->SetSecurity("SMTP=UStartTLSSMTPUSE=MAND", "")
mailHandler->SetSecurity("SMTP=UAuthLoginSMTPUSE=MAND", "user=mailpassword=password")
mailHandler->LogonSMTP("smtp.office365.com+587", "", "") ; -> $status = -7
mailHandler->GetSMTPResponse(code, message) ; -> code = 250

Hi Gianni, 

Check it out https://u.uniface.info/docs/1000/uniface/security/securityDriver/SMTP_STARTTLSSecurityDriver.htm

 newinstance "UPOPMAIL", mailHandler

mailHandler->SetSecurity("SMTP=UStartTLSSMTPUSE=MAND", "")
mailHandler->SetSecurity("SMTP=UAuthLoginSMTPUSE=MAND", "user=mailpassword=password")
mailHandler->LogonSMTP("smtp.office365.com+587", "", "") ; -> $status = -7
mailHandler->GetSMTPResponse(code, message) ; -> code = 250

OK, I assume the criteria documented should work.

I see you are trying to connect to: smtp.office365.com+587. OK!

I suppose the string "password" is your password. OK!

It could be I am going on a wrong path here, but...where is the username?
I see only USER=mail but usually it should be provided to Office365 as an email address because Office365 is a shared email server; I do not see it in your example.

In an example reported into documentation a call to security driver set thing inside it: SetSecurity(vSetProps, vSetParams)
I do not see it in your example.

Sorry if those are just hints... 🙂

Regards,
Gianni

 newinstance "UPOPMAIL", mailHandler

mailHandler->SetSecurity("SMTP=UStartTLSSMTPUSE=MAND", "")
mailHandler->SetSecurity("SMTP=UAuthLoginSMTPUSE=MAND", "user=mailpassword=password")
mailHandler->LogonSMTP("smtp.office365.com+587", "", "") ; -> $status = -7
mailHandler->GetSMTPResponse(code, message) ; -> code = 250

Hi,

I get the same error after a very long time of waiting.
Could that be due to the certificates?

Codesnippet:

if ($coding$ = <CODING_STARTTLS_OFFICE365>)

  strSecurityProperties = "SMTP=UStartTLSSMTP·;USE=mand"

  strSecurityParameters = ""

  call lpSetSecurity(hndUPopMail,strSecurityProperties,strSecurityParameters)

  if ($status < 0)

   deleteinstance hndUPopMail

   return(<FAILED>)

  endif

 endif

 if ($user$ != "" %\\

  &   $password$ != "")

  if ($security_type$ = <SECURITY_TYPE_AUTHLOGIN>)

   if ($coding$ = <CODING_STARTTLS_OFFICE365>)

    strSecurityProperties = "SMTP=UAuthLoginSMTP·;USE=mand"

   else

    strSecurityProperties = "SMTP=UAuthLoginSMTP·;USE=opt"

   endif

  else

   strSecurityProperties = "SMTP=UAuthNTLMSMTP"

  endif

  if ($coding$ = <CODING_STARTTLS_OFFICE365>)

   strSecurityParameters = "USER=%%$user$%%%·;PASSWORD=%%$password$%%%"

  else

   strSecurityParameters = "DOMAIN=%%$domain$%%%·;USER=%%$user$%%%·;PASSWORD=%%$password$%%%"

  endif

  call lpSetSecurity(hndUPopMail,strSecurityProperties,strSecurityParameters)

  if ($status < 0)

   deleteinstance hndUPopMail

   return(<FAILED>)

  endif

 endif

 call lpLogonSMTP(hndUPopMail)

 if ($status < 0)

  deleteinstance hndUPopMail

  return(<FAILED>)    

 endif

Regards,

Oli

Exactly, I don't know about the certificates, it doesn't makes sense to me because we are not the server in this situation

 newinstance "UPOPMAIL", mailHandler

mailHandler->SetSecurity("SMTP=UStartTLSSMTPUSE=MAND", "")
mailHandler->SetSecurity("SMTP=UAuthLoginSMTPUSE=MAND", "user=mailpassword=password")
mailHandler->LogonSMTP("smtp.office365.com+587", "", "") ; -> $status = -7
mailHandler->GetSMTPResponse(code, message) ; -> code = 250

Hello All,

Here at Uniface we have read your comments and we are looking into it now. An update will follow later today.

Regards,

Jan Cees

Morning,

I hope this helps:

If I tried this:

variables 
  handle hPopmail
  string vSmtpServer
endvariables 
debug  
; Create a new UPOPMAIL instance
newinstance "UPOPMAIL", hPopmail

; Define two security drivers in the security context.
; The first will upgrade the initial TCP connection to a TLS connection.
; The second will do an SMTP logon with a username and password, over that TLS connection.

hPopmail->SetSecurity("SMTP=UStartTLSSMTP;USE=opt", "")
hPopmail->SetSecurity("SMTP=UAuthLoginSMTP;USE=opt", "USER=xyz@point-software.de;PASSWORD=xxxxxx")

; Specify the network connection string to the SMTP server 
vSmtpServer = "smtp.office365.com+587"    
    
; Do the actual connect and logon.
hPopmail->LogonSmtp(vSmtpServer, "", "")

; Specify the mail header information
hPopmail->SetFrom("point@point-software.de")
hPopmail->SetToList("oliver.nelles@point-software.de")
hPopmail->SetSubject("Test")

; Specify the message body
hPopmail->SetMessage("Test", "")  ; plain text body

hPopmail->Send("IgnoreRcptError=True")

I get an error -2 by sending the mail.

Log data:

UPOPMAIL: Version 9.7.05 054 20201021.183443
UPOPMAIL: <F2> SETSECURITY: Setting security for SMTP protocol
Unable to locate: UStartTLSSMTP;USE=opt
*** The application has tried to dynamically perform this 3GL function but could not find it.
*** Check if you have an entry for this function in the [USER_3GL] section of your assignment file.
Unable to locate: UStartTLSSMTP;USE=opt
*** The application has tried to dynamically perform this 3GL function but could not find it.
*** Check if you have an entry for this function in the [USER_3GL] section of your assignment file.
UPOPMAIL: <E1> SETSECURITY: Could not get entry point function UStartTLSSMTP;USE=opt
UPOPMAIL: <F2> SETSECURITY: Setting security for SMTP protocol
Unable to locate: UAuthLoginSMTP;USE=opt
*** The application has tried to dynamically perform this 3GL function but could not find it.
*** Check if you have an entry for this function in the [USER_3GL] section of your assignment file.
Unable to locate: UAuthLoginSMTP;USE=opt
*** The application has tried to dynamically perform this 3GL function but could not find it.
*** Check if you have an entry for this function in the [USER_3GL] section of your assignment file.
UPOPMAIL: <E1> SETSECURITY: Could not get entry point function UAuthLoginSMTP;USE=opt
UPOPMAIL: <F1> net_open: Opening connection with server: smtp.office365.com and port: 587
UPOPMAIL: <E1> net_open: connection to server smtp.office365.com+587 succeeded
UPOPMAIL: <F1> LOGONSMTP: Opened SMTP connection to server
UPOPMAIL: <D0> SMTP_READ: Code: 220, got len: 111
UPOPMAIL: <D0> SMTP_READ: 220 AM0PR07CA0029.outlook.office365.com Microsoft ESMTP MAIL Service ready at Fri, 30 Oct 2020 08:14:14 +0
UPOPMAIL: <D0> SMTP_READ: 000
UPOPMAIL: <D0> LOGONSMTP: Parsed response from server, code:220, status:107, last:1, offset:4, response: 220 AM0PR07CA0029.outlook.office365.com Microsoft ESMTP MAIL Service ready at Fri, 30 Oct 2020 08:14:14 +0000
UPOPMAIL: <D1> SMTP_HELO: HELO buffer: HELO W10DEV01.pointsw.intra
UPOPMAIL: <D0> SMTP_READLINE: Code: 250, received buffer: AM0PR07CA0029.outlook.office365.com Hello [xx.xxx.xxx.xx]
UPOPMAIL: <D0> SMTP_HELO: Parsed response from server, code: 250, status: 63, response: AM0PR07CA0029.outlook.office365.com Hello [xx.xxx.xxx.xx]
UPOPMAIL: <F2> LOGONSMTP: Helo command done, status: 0
UPOPMAIL: <E1> PARSE_LIST: missing required parameter
UPOPMAIL: <E0> PARSE_LIST: key 'maxsize' not found in the list
UPOPMAIL: <F2> SMTP_FROM: Written from command, status: 38
UPOPMAIL: <F2> SEND: From command done, status: 0
UPOPMAIL: <D0> SMTP_READLINE: Code: 451, received buffer: 5.7.3 STARTTLS is required to send mail [AM0PR07CA0029.eurprd07.prod.outlook.com]
UPOPMAIL: <D0> SEND: Got reply on MAIL FROM command, code: 451, reply: 5.7.3 STARTTLS is required to send mail [AM0PR07CA0029.eurprd07.prod.outlook.com]
, status = 87
UPOPMAIL: <F0> CLEAR_MESSAGE_CONTENTS: Clear all message contents.

Regards

Oli

Your call to the SetSecurity operation is not correct. The first parameter should contain a Uniface list. E.g.

hPopmail->SetSecurity("SMTP=UStartTLSSMTP<GOLD>;USE=opt", "")

When copying code from the documentation then you need to make sure that you pay special attention if certain characters are highlighted. The ";" in the sample is actually the list-separator <GOLD>+;.

And it seems that the -7 error returned by the LogonSMTP operation could mean that the TLS driver (that is used by the UOPMAIL component) cannot find the file with the trusted CA certificates (https://u.uniface.info/docs/1000/uniface/networkSupport/TLS/options/ca_certificate.htm). This is not correct, since the error -8 should be returned.

I hope this helps.

Regards,
Daniel

Hi,

so yes this was my mistake.

I get the response from handshake more quickly, now.

In fact error -7 and then error -8.

I've already checked the internet to find any instructions how to create my own certificate. Unfortunately without any results.

Could you give me a tip? Does the URouter have to be started now?

Thank you very much.

Loaded 'upop' from \\\\W12KP150\\AppService\\usys9705\\common\\bin\\upop.dll, version: 9.7.05  054
UPOPMAIL: Version 9.7.05 054 20201021.183443
UPOPMAIL: <F2> SETSECURITY: Setting security for SMTP protocol
UPOPMAIL: <D0> SETSECURITY: Driver SMTP=UStartTLSSMTPUSE=MAND: USEC_DRVINFO=USEC_SUCCESS: Initialised
UPOPMAIL: <F2> SETSECURITY: Setting security for SMTP protocol
UPOPMAIL: <D0> SETSECURITY: Driver SMTP=UAuthLoginSMTPUSE=MAND: USEC_DRVINFO=USEC_SUCCESS: Initialised
UPOPMAIL: <F1> net_open: Opening connection with server: smtp.office365.com and port: 587
Loaded 'umwpsv10' from \\\\W12KP150\\AppService\\usys9705\\common\\bin\\umwpsv10.dll, version: 9.7.05  054
Loaded 'utcp10' from \\\\W12KP150\\AppService\\usys9705\\common\\bin\\utcp10.dll, version: 9.7.05  054
UPOPMAIL: <E1> net_open: connection to server smtp.office365.com+587 succeeded
UPOPMAIL: <F1> LOGONSMTP: Opened SMTP connection to server
UPOPMAIL: <D0> SMTP_READ: Code: 220, got len: 111
UPOPMAIL: <D0> SMTP_READ: 220 AM8P190CA0005.outlook.office365.com Microsoft ESMTP MAIL Service ready at Fri, 30 Oct 2020 14:11:59 +0
UPOPMAIL: <D0> SMTP_READ: 000
UPOPMAIL: <D0> LOGONSMTP: Parsed response from server, code:220, status:107, last:1, offset:4, response: 220 AM8P190CA0005.outlook.office365.com Microsoft ESMTP MAIL Service ready at Fri, 30 Oct 2020 14:11:59 +0000
UPOPMAIL: <F1> smtp_verify: EHLO buffer: EHLO W10DEV01.pointsw.intra
UPOPMAIL: <D0> SMTP_READ: Code: 250, got len: 63: 250-AM8P190CA0005.outlook.office365.com Hello [80.151.252.25]
UPOPMAIL: <D0> SMTP_READ: Code: 250, got len: 20: 250-SIZE 157286400
UPOPMAIL: <D0> SMTP_READ: Code: 250, got len: 16: 250-PIPELINING
UPOPMAIL: <D0> SMTP_READ: Code: 250, got len: 9: 250-DSN
UPOPMAIL: <D0> SMTP_READ: Code: 250, got len: 25: 250-ENHANCEDSTATUSCODES
UPOPMAIL: <D0> SMTP_READ: Code: 250, got len: 14: 250-STARTTLS
UPOPMAIL: <D0> SMTP_READ: Code: 250, got len: 14: 250-8BITMIME
UPOPMAIL: <D0> SMTP_READ: Code: 250, got len: 16: 250-BINARYMIME
UPOPMAIL: <D0> SMTP_READ: Code: 250, got len: 14: 250-CHUNKING
UPOPMAIL: <D0> SMTP_READ: Code: 250, got len: 14: 250 SMTPUTF8
UPOPMAIL: <D0> smtp_verify: Driver SMTP=UStartTLSSMTPUSE=MAND: USEC_VERIFY=USEC_SUCCESS: Server supports driver
UPOPMAIL: <F2> LOGONSMTP: EHLO command successfully done
UPOPMAIL: <D0> SET_SECURITY_CONTEXT: Driver SMTP=UStartTLSSMTPUSE=MAND: USEC_OPENMSG=USEC_CONTINUE: 
UPOPMAIL: <D0> SET_SECURITY_CONTEXT: net_write: len=10, STARTTLS
UPOPMAIL: <D0> SET_SECURITY_CONTEXT: net_read: len=29, 220 2.0.0 SMTP server ready
UPOPMAIL: <F1> net_starttls: Create nctrl for TLS connection!
Loaded 'utls10' from \\\\W12KP150\\AppService\\usys9705\\common\\bin\\utls10.dll, version: 9.7.05  054
UPOPMAIL: <E1> net_starttls: Network control block for TLS connection has been created successfully!
NETERR_CONNECTION [-18]: TLS: [-10] Could not complete SSL handshake, (SSL: [5] SSL_ERROR_SYSCALL OpenSSL error connection closed prematurely, no close_notify, (Client) )
UPOPMAIL: <E1> net_starttls: connection upgrade failed , status=-18
UPOPMAIL: <D0> SET_SECURITY_CONTEXT: Driver SMTP=UStartTLSSMTPUSE=MAND: USEC_OPENMSG=USEC_SUCCESS: 
UPOPMAIL: <F2> 1397448340: Security context successfully established
UPOPMAIL: <F1> smtp_verify: EHLO buffer: EHLO W10DEV01.pointsw.intra
NETERR_UNKNOWN [-16]: TCP: [-4] Data was not completely received
UPOPMAIL: <E1> net_read: For server type = SMTP_SERVER, error in reading with status -16.
UPOPMAIL: <E1> SMTP_READ: Error in reading the network: -4
UPOPMAIL: <E1> PARSE_LIST: missing required parameter
UPOPMAIL: <F0> CLEAR_MESSAGE_CONTENTS: Clear all message contents.

Regards,

Oli

It's not necessary to create your own certificates. Just download the Mozilla CA certificate store from here:

> https://curl.haxx.se/docs/caextract.html

Rename the file cacert.pem to ca-bundle.crt and copy it to \\common\\usys of your Uniface installation.

And you don't need the URouter service for this. The UPOPMAIL component is just using the TLS driver to contact the mail server. This is something new. Before UPOPMAIL used its own network code and now it's reusing the existing Uniface TCP/TLS driver.

But it might be possible that more is required to get this working. It is possible that you need to register the app in your Microsoft account that should access the Outlook/Office 365 mail server. Something to do with OAUTH/OAUTH2. But I currently don't know all the details. Sorry. The lab, however, will try to create a small tutorial with a detailed step-by-step description how to get this working.

I hope this helps.

Regards,
Daniel

I would like to have your knowledge. 🙂

I think we have made all  settings on the part of Office 365.

Last problem I think:

NETERR_CONNECTION [-18]: TLS: [-10] Could not complete SSL handshake, Certificate error: DNS Name, Hostname mismatch

NETERR_UNKNOWN [-16]: TCP: [-4] Data was not completely received

I've already searched in google, but I haven't found anything who could that explain.

Thx Daniel.

Regards Oli

 newinstance "UPOPMAIL", mailHandler

mailHandler->SetSecurity("SMTP=UStartTLSSMTPUSE=MAND", "")
mailHandler->SetSecurity("SMTP=UAuthLoginSMTPUSE=MAND", "user=mailpassword=password")
mailHandler->LogonSMTP("smtp.office365.com+587", "", "") ; -> $status = -7
mailHandler->GetSMTPResponse(code, message) ; -> code = 250

I'm putting up for discussion again. Is this what we have to do?

https://www.limilabs.com/blog/oauth2-office365-exchange-imap-pop3-smtp

The first error ("TLS: [-10] Could not complete SSL handshake, Certificate error: DNS Name, Hostname mismatch") should go away when you disable the server name verification of the TLS driver (verify_server_name=0).

Regards,
Daniel

 newinstance "UPOPMAIL", mailHandler

mailHandler->SetSecurity("SMTP=UStartTLSSMTPUSE=MAND", "")
mailHandler->SetSecurity("SMTP=UAuthLoginSMTPUSE=MAND", "user=mailpassword=password")
mailHandler->LogonSMTP("smtp.office365.com+587", "", "") ; -> $status = -7
mailHandler->GetSMTPResponse(code, message) ; -> code = 250

A brief summary for this issue. The reported problem(s) should go away when:

1. Downloading the Mozilla CA certificate store (see https://curl.haxx.se/docs/caextract.html), rename the file cacert.pem to ca-bundle.crt and copy it to \\common\\usys of your Uniface installation.

2. Make sure to enable the server verification and disable the server name verification of the TLS driver:
   
   usys$tls_params = verify_server=1, verify_server_name=0

I hope this helps.

Regards,
Daniel

It works. Thx. Today I will write a manual for the others in a separate thread. Maybe the lab can use that too.

I agree. This setting works. I thought we had set something on Office 365 (connectors, etc.). Works without it.

 newinstance "UPOPMAIL", mailHandler

mailHandler->SetSecurity("SMTP=UStartTLSSMTPUSE=MAND", "")
mailHandler->SetSecurity("SMTP=UAuthLoginSMTPUSE=MAND", "user=mailpassword=password")
mailHandler->LogonSMTP("smtp.office365.com+587", "", "") ; -> $status = -7
mailHandler->GetSMTPResponse(code, message) ; -> code = 250

FYI: with the patch 9.7.05.056 and 10.3.02.045 the following issues have been fixed:

• RI-4856 - Missing/incorrect ca-bundle throws error -7 instead of -8 with UPOPMAIL starttls (Old bug number: 32157)
• RI-4858 - UPOPMAIL SMTP response values not updated in GetSMTPResponse (Old bug number: 32159)