VCO unable to send email due to error SSL routines:ssl_choose_client_version:unsupported protocol

Products

• VMware VeloCloud SD-WAN
• VMWare SD-WAN
• VMware SD-WAN by VeloCloud

Issue/Introduction

VCO unable to send email due to SSL certificate issue. We will see errors regarding SSL certificate while sending test email from VCO.

We saw errors like "ERROR: 140161915472744:error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_lib.c:1922:"

Environment

SDWAN Orchestrator

Version affected - Any version

Cause

Issue happens during verification of the SMTP side SSL certificate due to domain mismatch or any other reason.

Resolution

We have to disable the SSL certificate verification for SMTP server by configuring below VCO system properties -

1) System property name - mail.smtp.tls 
Data type - JSON
Value  - { "rejectUnauthorized" : false }

 

2) System property name - mail.smtp.secureConnection
Data type - Boolean
Value - False

 

Change needs to be done using Operator Superuser from Orchestrator tab  ---> System Properties