Test email notifications fail with the STARTTLS option enabled in vRealize Log Insight

Products

• VMware Aria Suite

Issue/Introduction

In order to enable the STARTTLS option you must at first configure a certificate on the vRealize Log Insight side by following the documentation: SMTP does not work with STARTTLS option enabled

If you continue to receive errors, you may need to update your Log Insight appliance's mailing library to work with your SMTP server. To do that you must download the attached javamail.jar file and replace it on each node in the cluster.

Symptoms:

• Test emails fails with the STARTTLS option enabled.
• No appropriate protocol (protocol is disabled or cipher suites are inappropriate) error when attempting to test email.

Environment

VMware vRealize Log Insight 8.x
VMware vRealize Log Insight 8.2.x
VMware vRealize Log Insight 8.1.x

Resolution

Check javamail.jar version

To confirm if you need to replace your javamail.jar file, follow the steps below to check the current version.
If the version number is 1.4.7 or earlier, it is recommended to update it with the attached version (1.6.2).

1. Log into the Primary node as root via SSH or Console, pressing ALT+F1 in a Console to log in.
2. Open javamail.jar to check version number:

vi /usr/lib/loginsight/application/lib/lib/javamail.jar

3. Find and highlight the META-INF/maven/javax.mail/mail/pom.xml file and press enter to open the file.
4. Navigate to line 55 to check version.

Example:
   <groupId>com.sun.mail</groupId>
   <artifactId>all</artifactId>
   <version>1.4.7</version>

5. Quit the text editor by typing :q + enter twice.

 

Replace javamail.jar

1. Copy the attached javamail.jar to all nodes under the /tmp directory using an SCP utility.
2. Log into the Primary node as root via SSH or Console, pressing ALT+F1 in a Console to log in.
3. Stop the loginsight service:

service loginsight stop

4. Backup the original javamail.jar:

mv /usr/lib/loginsight/application/lib/lib/javamail.jar ~/javamail.jar_backup

5. Remove javamail.jar from it's secondary location:

rm /usr/lib/loginsight/application/3rd_party/apache-tomcat-X.X.XX/webapps/ROOT/WEB-INF/lib/javamail.jar

6. Copy the new javamail.jar to both known locations by running the following commands:

 

• copy /tmp/javamail.jar /usr/lib/loginsight/application/lib/lib/javamail.jar
• mv /tmp/javamail.jar /usr/lib/loginsight/application/3rd_party/apache-tomcat-X.X.XX/webapps/ROOT/WEB-INF/lib/javamail.jar

7. Start the loginsight service:

service loginsight start

8. Repeat steps 1-7 on all other nodes in the vRealize Log Insight cluster.