Support Questions

Find answers, ask questions, and share your expertise
Announcements
Check out our newest addition to the community, the Cloudera Data Analytics (CDA) group hub.

How can I disable SSL peer verification for SMTP notification mails?

Currenlty, in my setup sending alert notification mails through SMTP with start TLS enabled fails due to a SSL peer verification error. I use a self signed certificate on the mail server and would like to disable SSL peer verification. Is there a property I could add to accomplish this?

2 REPLIES 2

Super Collaborator

If you could paste the exact error message you're getting that would help.

Ambari uses JavaMail to send alerts via SMTP. When creating/editing a notification in the UI, there's a section all the way at the bottom where you can "Add Property" - it should be right below the "TLS" checkbox. Here, you can supply any JavaMail property you need.

For example, you could add the property "mail.smtp.ssl.trust" set to the value of "*" (without quotes)

@Jonathan Hurley:

The error I'm getting in the Postfix log:

warning: TLS library problem: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:s3_pkt.c:1315:SSL alert number 46:

The solution you suggest is exactly what I was looking for. I'll test and report back.

Take a Tour of the Community
Don't have an account?
Your experience may be limited. Sign in to explore more.