[SLING-10360] The CLI tool cannot send emails via mail-relay.apache.org any more

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Committer CLI 1.0.0
• Component/s: Tooling
• Assignee: Radu Cotescu
• Reporter: Radu Cotescu
• Created: 07/May/21 14:28
• Updated: 07/May/21 14:29
• Resolved: 07/May/21 14:29

Description

The Committer CLI tool cannot send emails any more using the ASF mail-relay due to a protocol issue:

javax.mail.MessagingException: Could not connect to SMTP host: mail-relay.apache.org, port: 465
	at com.sun.mail.smtp.SMTPTransport.openServer(SMTPTransport.java:1961)
	at com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:654)
	at javax.mail.Service.connect(Service.java:295)
	at javax.mail.Service.connect(Service.java:176)
	at javax.mail.Service.connect(Service.java:196)
	at javax.mail.Transport.send0(Transport.java:251)
	at javax.mail.Transport.send(Transport.java:174)
	at org.apache.sling.cli.impl.mail.Mailer.send(Mailer.java:62)
	at org.apache.sling.cli.impl.release.PrepareVoteEmailCommand.call(PrepareVoteEmailCommand.java:158)
	at org.apache.sling.cli.impl.release.PrepareVoteEmailCommand.call(PrepareVoteEmailCommand.java:48)
	at picocli.CommandLine.executeUserObject(CommandLine.java:1701)
	at picocli.CommandLine.access$900(CommandLine.java:146)
	at picocli.CommandLine$RunLast.handle(CommandLine.java:2059)
	at picocli.CommandLine$RunLast.handle(CommandLine.java:2026)
	at picocli.CommandLine$AbstractParseResultHandler.execute(CommandLine.java:1893)
	at picocli.CommandLine.execute(CommandLine.java:1822)
	at org.apache.sling.cli.impl.CommandProcessor.runCommand(CommandProcessor.java:110)
	at org.apache.sling.cli.impl.ExecutionTrigger.lambda$activate$0(ExecutionTrigger.java:33)
	at java.base/java.lang.Thread.run(Unknown Source)
Caused by: javax.net.ssl.SSLHandshakeException: No appropriate protocol (protocol is disabled or cipher suites are inappropriate)
	at java.base/sun.security.ssl.HandshakeContext.<init>(Unknown Source)
	at java.base/sun.security.ssl.ClientHandshakeContext.<init>(Unknown Source)
	at java.base/sun.security.ssl.TransportContext.kickstart(Unknown Source)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
	at com.sun.mail.util.SocketFetcher.configureSSLSocket(SocketFetcher.java:527)
	at com.sun.mail.util.SocketFetcher.createSocket(SocketFetcher.java:332)
	at com.sun.mail.util.SocketFetcher.getSocket(SocketFetcher.java:208)
	at com.sun.mail.smtp.SMTPTransport.openServer(SMTPTransport.java:1927)
	... 18 common frames omitted 

I suspect that this is because of a configuration change in the relay, where support for TLSv1 (the default protocol for an SSL socket in javax.mail) has been disabled.