java - 我无法在 Ubuntu 服务器上发送电子邮件 [javax.net.ssl.SSLHandshakeException]

Question

我突然无法在 Unbuntu 服务器上发送电子邮件。
从今天开始就发生了。
它仍在本地工作。

javax.mail.MessagingException: Could not convert socket to TLS;
nested exception is:
javax.net.ssl.SSLHandshakeException: No appropriate protocol (protocol is disabled or cipher suites are inappropriate)
at com.sun.mail.smtp.SMTPTransport.startTLS(SMTPTransport.java:1907)
at com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:666)

JAVA:
openjdk 版本“11.0.11” 2021-04-20
OpenJDK 运行环境(build 11.0.11+9-Ubuntu-0ubuntu2.20.04)
OpenJDK 64-Bit Server VM (build 11.0.11+9-Ubuntu-0ubuntu2.20.04, 混合模式, 共享)
握手后新 session 票到达:
SSL- session :
协议(protocol):TLSv1.3
密码:TLS_AES_256_GCM_SHA384

Answer 1

您的服务器似乎使用 TLSv1.1 或更早版本，并且您最近将 Java 升级到了 11.0.11 版本。这个版本的 Java 默认禁用了 TLSv1.0 和 TLSv1.1，例如见 Oracle Java 11.0.11 release notes (尽管 AFAIK 这适用于所有 OpenJDK 派生版本):

security-libs/javax.net.ssl
➜ Disable TLS 1.0 and 1.1

TLS 1.0 and 1.1 are versions of the TLS protocol that are no longerconsidered secure and have been superseded by more secure and modernversions (TLS 1.2 and 1.3).

These versions have now been disabled by default. If you encounterissues, you can, at your own risk, re-enable the versions by removing"TLSv1" and/or "TLSv1.1" from the jdk.tls.disabledAlgorithmssecurity property in the java.security configuration file.

如果删除 TLSv1.1，我建议您尝试来自 jdk.tls.disabledAlgorithms java.security 中的属性(property)文件修复了您的问题，如果失败，请尝试删除 TLSv1 .这表明您的邮件服务器需要更新或配置以支持更新和更安全的 TLS 版本。