Skip to main content
ciadam
New Member
December 18, 2022
Question

TLS handshake

  • December 18, 2022
  • 2 replies
  • 1853 views

Hi,

For few days i get information on FortiMail 

TLS handshake

ciadam_0-1671367250694.png

 

Problem sending the message to the recipient, only after 3 attempts the fortimail server sends

 

2 replies

Stephen_G
Staff & Editor
Staff & Editor
December 21, 2022

Hello ciadam, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

 

Thanks, 

Stephen Gerner

Fortinet Community Team 

Stephen_G - Fortinet Community Team
Markus_M
Staff & Editor
Staff & Editor
December 21, 2022

Hi Adam,

 

typically this is a certificate related problem. Either your FortiMail or the other server will not trust the other node's certificate.

More technical information:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-TLS-and-the-use-of-Digital-Certificates/ta-p/214958

 

Check whether your FortiMail certificates are expired or otherwise invalidated.

with openssl you can check about the other certificate.

openssl s_client -connect theothermail.server:25

openssl s_client -starttls smtp -connect theothermail.server:25

 

one of them should give some good output about the servers certificate.

 

Using that same error message in a search engine of choice, like 403 4.7.0 tls handshake, will give you a bunch of more results.

It does sound like either FortiMail or the other webserver are not supporting the same TLS version.

 

Best regards,

 

Markus

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.