Description of problem: We are noting that on CF 4.5 when testing and/or saving Outgoing SMTP E-mail Server settings that some do not appear to be used/saved on the first attempt. In particular, we are finding that we have to toggle some of the settings save and toggle back to get what we need. Specifically, the first issue we encounter each time is that the SSL Verify Mode => None does not take effect. Since the server here has a bad SSL cert, we want to use None, but we can't get None to work until we set it peer, save, set it to none, save, even though the default is none. Version-Release number of selected component (if applicable): 5.8.0.17.20170525183055_6317a22 How reproducible: Always Additional info: /var/www/miq/vmdb/log/last_settings.txt also shows nothing set for :openssl_verify_mode: until toggling the setting. See attached pics.
Created attachment 1305049 [details] initial setup - SSL Verify Mode default to none
Created attachment 1305050 [details] openssl_verify_mode not set in last_settings.txt
Created attachment 1305051 [details] toggle to peer
Created attachment 1305052 [details] openssl_verify_mode now set to peer
Created attachment 1305053 [details] SSL Verify Mode toggled to None (and saved)
Created attachment 1305054 [details] openssl_verify_mode now set to none
Please assess the impact of this issue and update the severity accordingly. Please refer to https://bugzilla.redhat.com/page.cgi?id=fields.html#bug_severity for a reminder on each severity's definition. If it's something like a tracker bug where it doesn't matter, please set it to Low/Low.
I can confirm this or a related bug on 5.8.1 * Configure SMTP settings with TLS disabled * Attempt to send test email * See red error message with TLS failure * switch tls verify to something, switch it back * attempt to send test email * Success
+1 on this bug. WORKAROUND ========== in advanced settings: :openssl_verify_mode: 'none' ^^^ will fix this issue
Note that to duplicate this problem, you need an SMTP relay that has an unsigned / self signed cert.
https://github.com/ManageIQ/manageiq-ui-classic/pull/3664
New commit detected on ManageIQ/manageiq-ui-classic/master: https://github.com/ManageIQ/manageiq-ui-classic/commit/b04dd450a00a3292bd02f2e155eb482e37948612 commit b04dd450a00a3292bd02f2e155eb482e37948612 Author: Aparna Karve <akarve> AuthorDate: Tue Mar 20 18:07:47 2018 -0400 Commit: Aparna Karve <akarve> CommitDate: Tue Mar 20 18:07:47 2018 -0400 Set `openssl_verify_mode` to "none" to make the value appear in Advanced settings https://bugzilla.redhat.com/show_bug.cgi?id=1475553 app/controllers/ops_controller/settings/common.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
Verified in 5.10.0.4. After setting Automatic TLS to false in advanced settings is :openssl_verify_mode: none.