You can use gmail's SMTP server to send out emails from CPPM.
Today, we will see how to use gmail SMTP server to send out emails for you.

  1. Create a gmail account.
  2. go to below URL 





          Allow less secure apps i.e. Allow less secure apps: ON.

  1. Navigate to Password & sign-in method in the same page. 


          set the two step verification to off. (That is the default.)

  1. Add the intermediate CA and Root CA to the trust list of CPPM. Download them by following the links.




  1. Configure the Messaging Setup as below:
          Connection Security must be set to 'StartTLS' and port to 587. 
  1. Try sending a test email



Email is successfully sent. 
If it fails to send, you can view the event viewer for additional information.




Verification :

Email received in inbox. 




For your reference:


To extract the smtp.gmail.com certificate:

sh-4.1# nslookup smtp.gmail.com
Server:         8.8.8.8
Address:        8.8.8.8#53

Non-authoritative answer:
smtp.gmail.com  canonical name = gmail-smtp-msa.l.google.com.
Name:   gmail-smtp-msa.l.google.com
Address: 74.125.24.108
Name:   gmail-smtp-msa.l.google.com
Address: 74.125.24.109

sh-4.1# openssl s_client -showcerts -connect 74.125.24.109:465
CONNECTED(00000003)

depth=2 OU = GlobalSign Root CA - R2, O = GlobalSign, CN = GlobalSign
verify return:1
depth=1 C = US, O = Google Trust Services, CN = Google Internet Authority G3
verify return:1
depth=0 C = US, ST = California, L = Mountain View, O = Google Inc, CN = smtp.gmail.com
verify return:1
---
Certificate chain
 0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=smtp.gmail.com
   i:/C=US/O=Google Trust Services/CN=Google Internet Authority G3
-----BEGIN CERTIFICATE-----
MIIEgjCCA2qgAwIBAgIIdzikJzCrdJ4wDQYJKoZIhvcNAQELBQAwVDELMAkGA1UE
BhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczElMCMGA1UEAxMc
R29vZ2xlIEludGVybmV0IEF1dGhvcml0eSBHMzAeFw0xNzEyMDUxMDE2MDlaFw0x
ODAyMjcwOTI5MDBaMGgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh
MRYwFAYDVQQHDA1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKDApHb29nbGUgSW5jMRcw
FQYDVQQDDA5zbXRwLmdtYWlsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAJs95vMtrTHpAnpa4jXG8tpViE17nDHG6TQv4ZboMhqWH5Kz93jnbGsn
DutTCvslV7jhc97qQ8sD1sX8HFUnQ2TfuRnj/MNsnl69r0AfLRiYKw5C8mqEsYUM
lhwCOt3j1Hx5SuzQDg2c3NZnBf5fKHvRQ6ZLIQwXqZe4yyiyGjJiVV+hfisB3zr8
X0Zs7/N35op3IPPRY827/u+ouTjQank9JGdTpxFROU+lzluKMp9NJjFbBSKrK+eG
MtwWnsX7TTQPnGmgERHd5TB5NIyQOXmiY3rjG2Q48HWFcUYTr5JXBS2gxEKJOd1M
6BYzXxOuIldsm0S+SbwGxGqVtsIcGbECAwEAAaOCAUIwggE+MBMGA1UdJQQMMAoG
CCsGAQUFBwMBMBkGA1UdEQQSMBCCDnNtdHAuZ21haWwuY29tMGgGCCsGAQUFBwEB
BFwwWjAtBggrBgEFBQcwAoYhaHR0cDovL3BraS5nb29nL2dzcjIvR1RTR0lBRzMu
Y3J0MCkGCCsGAQUFBzABhh1odHRwOi8vb2NzcC5wa2kuZ29vZy9HVFNHSUFHMzAd
BgNVHQ4EFgQUhWthQjn9lnb5d5NezXJ2wBbA3aMwDAYDVR0TAQH/BAIwADAfBgNV
HSMEGDAWgBR3wrhQmmd2drEtwobQg6B+pn66SzAhBgNVHSAEGjAYMAwGCisGAQQB
1nkCBQMwCAYGZ4EMAQICMDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6Ly9jcmwucGtp
Lmdvb2cvR1RTR0lBRzMuY3JsMA0GCSqGSIb3DQEBCwUAA4IBAQAxNVxTDvtUSUzE
HQSyhwLCrf9uvO4nbGdk/7gxKFb3H6LKlnclzzNDUevATUMiPANETRWtwr7b56Ot
p61h3Z1uzqQhx1+XulOcliWm/taEx/IskEFABiuWrZEbq25BOZH1THs/rXdsJ9O0
OSvIU1Mle9bWwsOvFtKI0+IfdRCAuywDZir/kucJ3/PYrJK2rfLjayCX7PfiSuF4
C2Pu/u4qHWZ3BpM5e1u3B3fSGfwVWP1rCDPIFRjnS7JH6B2A61aCR0f1GUbB+ums
dIPVoIY16vXhrolP4jcoQlB0rVSh9zmRk1NzrQZffSpFz6gdcD8XCa659Y1LzeVP
KprrPbe/
-----END CERTIFICATE-----
 1 s:/C=US/O=Google Trust Services/CN=Google Internet Authority G3
   i:/OU=GlobalSign Root CA - R2/O=GlobalSign/CN=GlobalSign
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/C=US/ST=California/L=Mountain View/O=Google Inc/CN=smtp.gmail.com
issuer=/C=US/O=Google Trust Services/CN=Google Internet Authority G3
---
No client certificate CA names sent
Peer signing digest: SHA256
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 2986 bytes and written 433 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 63AAFEADB5EADD8456F67E2549CC98D12E9AA9163910C3222C6A86B2A272942E
    Session-ID-ctx:
    Master-Key: C8EC5EBD78DF0E12639305676AAFD16917C04E875447499C94F287812B5AA59D255E63151C3229184B53B70890FD2390
    Key-Arg   : None
    Krb5 Principal: None
    PSK identity: None
    PSK identity hint: None
    TLS session ticket lifetime hint: 100800 (seconds)
    TLS session ticket:
    0000 - 00 0d f8 83 0a 59 d7 0b-1f 6c 04 70 c3 ff fa 66   .....Y...l.p...f
    0010 - 08 c3 f4 e0 f7 b2 39 db-52 bc 26 f0 bf b8 d2 50   ......9.R.&....P
    0020 - 68 b3 1f b4 b9 55 a8 1b-07 22 12 05 bb 66 b7 1a   h....U..."...f..
    0030 - 20 d4 11 b5 be 60 78 69-17 1c a0 91 b3 3f b1 6b    ....`xi.....?.k
    0040 - 70 2c ea 64 72 82 37 fb-a7 ac b8 f4 09 70 bf d6   p,.dr.7......p..
    0050 - 36 93 46 9b 64 2c ee b1-a5 7f ca 9d 70 a3 64 8b   6.F.d,......p.d.
    0060 - b8 ec fc 61 b1 aa ca 7c-e4 64 d5 ad 74 1e 70 41   ...a...|.d..t.pA
    0070 - 4f 77 e7 f9 03 80 2c 48-cf 4e ee 2a 97 ba c1 06   Ow....,H.N.*....
    0080 - 37 f3 e4 87 95 f1 5e f2-d4 c5 df 9f 37 67 95 64   7.....^.....7g.d
    0090 - 51 db 6c 1c d0 44 db 17-2d d4 a5 83 a8 ad 6b e0   Q.l..D..-.....k.
    00a0 - 5a f9 68 7e 7d 22 b0 45-73 6c ed f9 5c e1 8b 76   Z.h~}".Esl..\..v
    00b0 - 8d 70 a5 5d ea 56 bb 03-c1 43 99 5d 3e c4 8a d7   .p.].V...C.]>...
    00c0 - 3f c0 e7 b6 1d 48 25 ab-87 f1 61 c3 97 b1 ef 78   ?....H%...a....x
    00d0 - b4 52 98 1e 90                                    .R...

    Start Time: 1515099031
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---
220 smtp.gmail.com ESMTP d81sm9757556pfj.163 - gsmtp


Comments

Post a Comment

Popular posts from this blog

Export all attributes of an authentication request from access tracker to a syslog server.

Image
Requirement :  We want to export authentication details along with Radius:IETF, Computed and Authorization attributes to the external Syslog server. The default Filter and columns will not allow us to export authentication records with attributes. Solution :  We have to construct our custom SQL query to include the fields we need and the attributes that we want to export to external Syslog server. Problem: The attributes are stored in multiple rows for each session id (i.e. for each authentication). To achieve the requirement, we are making use of PostgreSQL array aggregate function i.e. array_agg(). Paste the following SQL query under Custom SQL field.  select a.id,a.user_name, a.service_name, a.host_mac, a.timestamp, array_agg(b.attr_name) as attributes, array_agg(b.attr_value) as values from tips_dashboard_summary a inner join tips_session_log_details b on a.id = b.session_id where b.attr_name in ('Radius:Aruba:Aruba-...
Read more