vRealize vROPS - Sending Reports with SMTP Outbound Ruleset doesn't work currectly in Version 8.6.2

[Garimos]

Hello everyone, currently I am confronted with the following problem:

We send mails containing our reports using the vROPS SMTP Outbound plugin. In this case we use the vROPS 8.6.2 (current build) in a cluster construct with 1 master and 3 data nodes.

We didn't have any problems corresponding to this when using the previous versions, for example 8.5 or 8.4.

Furthermore, we have already checked the accessibility of our SMTP servers (via TLS1_2) and the possibility to send a test mail, in both cases we cannot report any errors. This results only in the problem that the function of sending reports via the outbound rule doesn't work, everything else works fine. 

Previous test scenarios and results:

1. Send a Test Message during the Configuration (SMTP Outbound Setting) in the vROPS GUI – Result: Sending Succeded 

2. Test the Connection between our vROPS Appliance and the SMTP Server with „openssl s_client -connect smtp.server.de:25 -starttls smtp -tls1_2“ – Result: Connection Succeded

3. Configuring a test report and use the configured SMTP outbound rule from the first attempt – Result: Sending Failed with the following log Message

The following error message keeps coming up (Appliance Analytic Logs)

2022-03-21T14:01:28,353+0000 ERROR [Sending Outbound Email message: 'Test_Report'; To: ; Mail@Acc.com]  com.vmware.vcops.platform.notification.email.EmailSender.call - Failed to send email: error: '{}'
javax.mail.MessagingException: Could not convert socket to TLS
         at com.sun.mail.smtp.SMTPTransport.startTLS(SMTPTransport.java:1907) ~[mail-1.4.7.jar:1.4.7]
         at com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:666) ~[mail-1.4.7.jar:1.4.7]
         at javax.mail.Service.connect(Service.java:317) ~[mail-1.4.7.jar:1.4.7]
         at javax.mail.Service.connect(Service.java:176) ~[mail-1.4.7.jar:1.4.7]
         at javax.mail.Service.connect(Service.java:125) ~[mail-1.4.7.jar:1.4.7]
         at com.vmware.vcops.platform.notification.email.EmailSender$MessageSendJob.call(EmailSender.java:294) [alive_platform.jar:?]
         at com.vmware.vcops.platform.notification.email.EmailSender$MessageSendJob.call(EmailSender.java:165) [alive_platform.jar:?]
         at java.util.concurrent.FutureTask.run(FutureTask.java:266) [?:1.8.0_312]
         at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_312]
         at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_312]
         at java.lang.Thread.run(Thread.java:748) [?:1.8.0_312]

The following error message keeps coming up (SMTP Server Logs)

Line 7032: 2022-03-21T13:31:16.285Z, smtp-server \TEC3,******,1, smtp-server:25, Appliance:37672,>,220 SMTP Service ready (DST) - TEC3-Virtualisierung,
Line 7033: 2022-03-21T13:31:16.286Z, smtp-server \TEC3,******,2, smtp-server:25, Appliance:37672,<,EHLO Appliance,
Line 7034: 2022-03-21T13:31:16.286Z, smtp-server \TEC3,******,3, smtp-server:25, Appliance:37672,>,250 smtp-server Hello [Appliance-IP] SIZE 20971520 PIPELINING DSN ENHANCEDSTATUSCODES STARTTLS 8BITMIME BINARYMIME CHUNKING,
Line 7035: 2022-03-21T13:31:16.286Z, smtp-server \TEC3,******,4, smtp-server:25, Appliance:37672,<,STARTTLS,
Line 7036: 2022-03-21T13:31:16.286Z, smtp-server \TEC3,******,5, smtp-server:25, Appliance:37672,>,220 2.0.0 SMTP server ready,
Line 7037: 2022-03-21T13:31:16.286Z, smtp-server \TEC3,******,6, smtp-server:25, Appliance:37672,*," CN=******, OU=******, O=******, S=Serverzertifikate (SHA-256), C=DE CN=******:PN, O=******, C=DE ****** 2021-10-21T08:40:31.000Z 2023-08-07T08:40:31.000Z
…
Line 7038: 2022-03-21T13:31:16.300Z,smtp-server\TEC3,******,7,SMTP-IP:25,Appliance-IP:37672,*,,TLS negotiation failed with error CertUnknown
Line 7039: 2022-03-21T13:31:16.300Z, smtp-server \TEC3,******,8,SMTP-IP:25,Appliance-IP:37672,-,,Local

After our test attempts and the resulting output, we decided to replace the "mail-1.4.2.jar" with the more current "mail-1.6.2.jar".

Before replacing the "old" mail.jar:

#find / -iname "*mail*jar"
/usr/lib/vmware-casa/casa-webapp/webapps/casa/WEB-INF/lib/javax.mail-1.6.2.jar
/usr/lib/vmware-vcops/common/lib/mail-1.4.7.jar
/usr/lib/vmware-vcops/controller/plugins/vcops-bridge-server-1.0-SNAPSHOT/lib/mail-1.4.7.jar
/usr/lib/vmware-vcops/user/plugins/inbound/MicrosoftAzureAdapter/lib/javax.mail-1.6.1.jar
/usr/lib/vmware-vcops/user/plugins/inbound/MicrosoftAzureAdapter/lib/javax.mail-1.6.2.jar
/usr/lib/vmware-vcops/user/plugins/inbound/vCACAdapter3/lib/bcmail-jdk15on.jar
/usr/lib/vmware-vcops/user/plugins/outbound/vcops-standard-email-plugin.jar
/usr/lib/vmware-vcops/tomcat-web-app/webapps/ui/WEB-INF/lib/mail-1.4.7.jar

After replacing the "old" mail.jar:

#find / -iname "*mail*jar"
/usr/lib/vmware-casa/casa-webapp/webapps/casa/WEB-INF/lib/javax.mail-1.6.2.jar
/usr/lib/vmware-vcops/common/lib/mail-1.6.2.jar
/usr/lib/vmware-vcops/controller/plugins/vcops-bridge-server-1.0-SNAPSHOT/lib/mail-1.6.2.jar
/usr/lib/vmware-vcops/user/plugins/inbound/MicrosoftAzureAdapter/lib/javax.mail-1.6.1.jar
/usr/lib/vmware-vcops/user/plugins/inbound/MicrosoftAzureAdapter/lib/javax.mail-1.6.2.jar
/usr/lib/vmware-vcops/user/plugins/inbound/vCACAdapter3/lib/bcmail-jdk15on.jar
/usr/lib/vmware-vcops/user/plugins/outbound/vcops-standard-email-plugin.jar
/usr/lib/vmware-vcops/tomcat-web-app/webapps/ui/WEB-INF/lib/mail-1.6.2.jar

steps taken while replacing the "old" mail.jar:

cd /usr/lib/vmware-vcops/tomcat-web-app/webapps/ui/WEB-INF/lib/
ls -l mail*
mv mail-1.4.7.jar mail-1.4.7.jar.orig
cp /root/javax.mail.jar ./mail-1.6.2.jar
chown apache.admin mail-1.6.2.jar
chmod 770 mail-1.6.2.jar

cd /usr/lib/vmware-vcops/common/lib
ls -l mail*
mv mail-1.4.7.jar mail-1.4.7.jar.orig
cp /root/javax.mail.jar ./mail-1.6.2.jar
chown admin.admin mail-1.6.2.jar
chmod 644 mail-1.6.2.jar

cd /usr/lib/vmware-vcops/controller/plugins/vcops-bridge-server-1.0-SNAPSHOT/lib
ls -l mail*
mv mail-1.4.7.jar mail-1.4.7.jar.orig
cp /root/javax.mail.jar ./mail-1.6.2.jar
chown admin.admin mail-1.6.2.jar
chmod 644 mail-1.6.2.jar

Result:

Test Mail & Report Mail Sending with outbound Ruleset doesn't work either ...

Corrent Error = Notification plugin test failed: javax/mail/BodyPart

Does anyone have a similar problem and can help in this case ?

Thank You

Greetings

Garimos

[sennevanlaer]

from the logs it seems vrops tryes to do TLS and that does  not work

Verify the mailserver is configured to use TLS and port 465 is accessible OR remove the checkmark 'use secure connection' in your outbound settings on vrops .