Closed Bug 1656742 Opened 5 years ago Closed 5 years ago

Sending of the message failed. "Peer using unsupported version of security protocol."

Categories

(Thunderbird :: General, defect)

Product:
Thunderbird
Component:
General
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 1657115

People

(Reporter: pilly53, Unassigned)

References

(
URL
)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36

Steps to reproduce:

There has been a thunderbird update to 78.1.0 (32-bit).
Since the update I can't send or recieve emails from my tpg email accounts
I can send to and from my gmail account within thunderbird so I figure its to do with the server setting
How can I fix this problem?

Actual results:

this is the message I get:

Sending of the message failed.
Peer using unsupported version of security protocol.
The configuration related to mail.tpg.com.au must be corrected.

Expected results:

thunderbird should allow my server setting

I too have this problem. However, cannot send but do receive emails for my account.

"Sending of the message failed.
Peer using unsupported version of security protocol.
The configuration related to mail.xxxxx.xx must be corrected."

Used a VirtualBox Windows 10 modelling VM and added the account details on a fresh install. The send and receive both work fine to the some account and ISP. So its NOT the ISP end.

Thunderbird 78.1.0 update has corrupted database. It was working fine on 78.0, and then.........

Unfortunately, Thunderbird 78.1.0 doesn't provide a method (or updated) export tools (accounts and emails) so I can rebuild all my accounts and retaining the emails and folders etc.

Time to leave Thunderbird. Too much going on and proving unreliable for upgrades. Second time this kind of upgrade has "trashed" my TB environment, in 3 yrs.

Ni donation this year.

I just uninstalled 78 after reading my emails would be safe as the program is separate from the data. When I installed the current version is said it could use the profile from 78 so there goes all my emails. Not happy about that I can tell you.

Component: Untriaged → General
Summary: Sending of the message failed peer using unsupported version of security protocol. → Sending of the message failed. "Peer using unsupported version of security protocol."

Hi Wayne,
Yes it was me who reported the https://bugzilla.mozilla.org/show_bug.cgi?id=1656742 ?
this is the same problem.
In the above post I made a typo "When I installed the current version is said it could use the profile from 78 so there goes all my emails."

it should have been " When I installed 68.11.0 (64-bit) the current version it said it couldn't use the profile from 78 so there goes all my emails."

I am thoroughly confused. Is it a TPG server you are using or some spam system. In your support request, you said the problem was with smtp.spamarrest.com. Here you say it is mail.tpg.com.au

I did a check on TPG SMTP server and it was a dismal failure from a security point of view. https://www.immuniweb.com/ssl/?id=b4vxJgGM

It is clear that you can not connect to it with any form of connection security at all as it only offers SSLv3 and TLSv1 both of which have be removed from Thunderbird because their encryption was broken years ago. TLS version 1 being removed in Thunderbird 68.5.

TPG makes no suggestion they offer connection encryption in their advertised settings https://www.tpg.com.au/support/generalsetting.php So I guess it is back to you. Are you using SSL, TLS or startTLS on your SMTP connection settings? perhaps just post the account settings and addons information for the troubleshooting information in the help menu as that should provide sufficient information to do more than guess which is the situation so far as even the server names appear to me to be in question.

Hi Matt
Just to clarify'
RE: "You said the problem was with smtp.spamarrest.com. Here you say it is mail.tpg.com.au"
its mail.tpg.com.au I did not mention smtp.spamarrest.com

RE: "Are you using SSL, TLS or startTLS on your SMTP connection settings"
I'm using startTLS

I'm sure your aim is the best possible security for Thunderbird but as you have found out from your investigation of tpg I don't have an option if I use thunderbird. I would think it would have been a better option to allow the use of SSLv3 and TLSv1 with a tick box and a warning.
Also it would have been great to have a way to step back to an earlier version of thunderbird with out me losing my contacts and all my saved emails due to the version profile or is it still possible just that I don't know the process.
Thanks for your time anyway

I will close this bug as invalid as the issue is your provider not offering up to date security and your choice to use a connection method other than that supported by your provider. The do not suggest the use of TLS or SSL. You should be aware that Microsoft, Mozilla and Google have all deprecated the old security protocol. So even if it to continues to function in one of their products, it will not be for long

Thunderbird follows Mozilla's lead on these matters and utilizes the same security engine that Firefox does so when Firefox removes support for aging and broken security, so does Thunderbird.

Status: UNCONFIRMED → RESOLVED
Closed: 5 years ago
Resolution: --- → INVALID

So I looked in bugzilla so as not to duplicate an issue. So my issue of no-send but receive-okay will be ignored.

So TB asks people to look for existing issues, but by the action of closing this issue will basically ignore my efforts to assist TB by no creating duplicate defect reports.

My ISP is supporting the protocols.

So what gives in my case and peterpbird's case?

The problem with open-source is no accountability, its the risk users of OSrc have. Its shame that TB main-stream goes its way and not worry about the add-ons.

Sorry a bitter tasting feeling. Just need a solution to recover.

Any idea where I can get a TB 68.11 download.....???????

I just do not understand. Your ISP is not supporting TLS1.2. I checked. If you dispute that please say so. But unless they support at least TLS1.2 then your provider is not offering the protocols required. The solution is to use their recommended settings which I provided a link to earlier which do not include the use of SSL/TLS that is connection security = NONE.

Before you continue about how unreasonable Thunderbird developers are being, let us look at it objectively. TLS V1.2 which is now the minimum being supported has been out there since 2008. A joint anouncement was made bu Google, Micrisift and Mozilla in 2018 that they would cease support for the older TLS 1 and 1.1 in early 2020. So your provider has had 8 years to upgrade their mail server and more than 2 years since the major players in internet browsers announced they would be withdrawing support and has chosen not to do so.

You might also like to read one of the articles that were written in 2018 when the intention was announced. Ars Technica has one here https://arstechnica.com/gadgets/2018/10/browser-vendors-unite-to-end-support-for-20-year-old-tls-1-0/ but you are welcome to google the topic and locate your own.

Please be aware I already said that support ended with 68.5, so downloading 68.11 will not be of any assistance to you at all.

Resolution: INVALID → DUPLICATE

I'm NOT using the same ISP as the original-poster. FYI

  • I have access to a WIN10 virtual-machine (virtualbox) with a clean slate

  • I install TB-68.2.2, and launch. It says upgrade. Which it does to 68.11

  • I add my account to it for the ISP in question
    -- at this point I'm able to send and receive emails with my ISP
    --- suggesting that with 68.11 it is running at TLS1.2

  • I manually update to 78.1 (with the basic account install [very small content in the email])

  • launch TB
    -- channel update happens to 78.1.1

  • I send email and it works okay

This later suggests my ISP is working at TLS1.2.

So with my non-virtual-machine main account setup, something has happened that is causing a non-sending ability. Some of my other accounts to a private email server work fine on the non-virtual-account. I've disabled internet-security and tested on the non-virtual-machine.

So it looks like I'm at a lost and need to re-image my machine back 2 weeks and lose the email I've acquired since then.

Bye

You need to log in before you can comment on or make changes to this bug.