Configure SSL SMTP Gmail for Scheduler Job in OBIEE 12c

quanvlm

Hi all,

     I had problems while configure google smtp mail service (SSL 465/ TLS 587) as smtp for scheduler job in my OBIEE 12c with error follows:

[nQSError: 75025] Handshake failed when connecting to SMTP server using SSL. AgentID: /users/weblogic/test agent

...Trying SMTP Delivery loop again... Sleeping for 3 seconds. AgentID: /users/weblogic/test agent

[nQSError: 75025] Handshake failed when connecting to SMTP server using SSL. AgentID: /users/weblogic/test agent

...Trying SMTP Delivery loop again... Sleeping for 5 seconds. AgentID: /users/weblogic/test agent

[nQSError: 75025] Handshake failed when connecting to SMTP server using SSL. AgentID: /users/weblogic/test agent

...Trying SMTP Delivery loop again... Sleeping for 8 seconds. AgentID: /users/weblogic/test agent

[nQSError: 75025] Handshake failed when connecting to SMTP server using SSL. AgentID: /users/weblogic/test agent

Exceeded number of SMTP delivery retries.

I have disabled firewall on my OBIEE server, but the problem still has occured. I tried gmx.com (port 25) as my smtp for scheduler job.

Are there any advice for me to resolve this problem?

Hope to see any feedback!

handat

You are getting a handshake error which means there is a problem with the SSL certificate validation or exchange. Add the following to your weblogic environment to get more detailed info about the problem for debug and diagnostic:

-Dssl.debug=true -Dweblogic.StdoutDebugEnabled=true -Dweblogic.security.SSL.verbose=true

quanvlm

Thanks for you quick reply but still failed. My nqscheduler.log file as follow:

There is any other suggestion for me? Thanks.

handat

The gmail smtp will present back three certificates. Make sure the CA is trusted by your truststore. If not, import it into it as trusted.

Here's a summary of that CA cert:

  Subject: CN=GeoTrust Global CA, O=GeoTrust Inc., C=US

  Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5

  Key:  Sun RSA public key, 2048 bits

  modulus: 27620593608073140957439440929253438012688864718977347268272053725994928948867769687165112265058896553974818505070806430256424431940072485024407486246475597522063246121214348496326377341879755851197260401080498544606788760407243324127929930612201002157618691487713632251700065187865963692723720912135393438861302779432180613616167225206519123176430362410262429702404863434904116727055203524505580952824336979641923534005571504410997292144760317953739063178352809680844232935574095508445145910310675421726257114605895831426222686272114090063230017292595425393719031924942422176213538487957041730136782988405751614792953

  public exponent: 65537

  Validity: [From: Tue May 21 14:00:00 AEST 2002,

               To: Tue Aug 21 14:00:00 AEST 2018]

  Issuer: OU=Equifax Secure Certificate Authority, O=Equifax, C=US

  SerialNumber: [    12bbe6]

quanvlm

Thanks @handat,

     Let me try with your advice.

quanvlm

I tried to add Gmail ca to OBIEE truststore, but still got error. I back to Oracle default mail server, port 25, it's OK. I gave up with Gmail configuration.  

LuisGodoy

i have the same error,  had looked for the solution in web forums but anyone know how to solve it,  i´m back to use a non secure port 25.

AgentID:

[nQSError: 75025] Handshake failed when connecting to SMTP server using SSL.    AgentID: /shared/....

[nQSError: 75025] Handshake failed when connecting to SMTP server using SSL.    AgentID: /shared/....

I created a folder where save cert files but just not work

JoazVieira

Hi, i know how to resolve this problem.

My domain use to google apps. My e-mails sent for obiee do not sent, the cause is because the error rejected by server.

The Google page,  report aspmx.l.google.com do not sent e-mail for other domains, except google and gmail.

https://support.google.com/a/answer/176600?hl=pt-BR

Then, we have create entry SPF, type TXT in our registry DNS domain.

https://support.google.com/a/answer/178723?hl=pt-BR&ref_topic=2759192

My problem its resolved, its work now.

LuisGodoy

Thanks for this information, in addition I must say that in the account settings should not put anything in user and password.

Currently it is working with gmail and has been solved perfectly

I do not know why not work with ssl, fortunately already been solved using port 25

Thank you again

JoazVieira

Yes @LuisGodoy

My obiee it is working with gmail perfectly. use port 25.

But not send e-mails for other domains.

The solution for the problem, i describe up topic.

Joaz

LuisGodoy

I have done a test, trying to send to other servers and to run properly, the agent configuration I have placed 3 email accounts from different domains and has passed with no problem,