SMTP servers requiring encryption of authentication not useable from VMS Mail

All types of networks, network stacks, and protocols supported by OpenVMS.

Topic author
madsweeney
VSI Expert
Active Contributor
Posts: 40
Joined: Mon Jun 10, 2019 9:23 am
Reputation: 1
Status: Offline

SMTP servers requiring encryption of authentication not useable from VMS Mail

Post by madsweeney » Wed Apr 27, 2022 12:44 pm

--- Observation ---
It is getting more and more difficult these days to send email from OpenVMS. TCP/IP Services V5.7 sends mail by connecting to a distant server, determined from the MX record for the destination domain, on port 25. It appears that the service cannot send mail through an SMTP server that requires either encryption or authentication. If I am wrong about any of that, please correct me.

How does TCP/IP Services V6.0 address those issues?
---

TCP/IP V6.0 does not include features to support sending mail through SMTP servers requiring authentication and encryption. Please reply to this topic if your application or product requires extending OpenVMS to support sending mail through SMTP servers requiring authentication and encryption.
Dave Sweeney
CEO
VMS Software, Inc.
Boston, MA USA

User avatar

arne_v
Master
Posts: 335
Joined: Fri Apr 17, 2020 7:31 pm
Reputation: 0
Location: Rhode Island, USA
Status: Offline
Contact:

Re: SMTP servers requiring encryption of authentication not useable from VMS Mail

Post by arne_v » Wed Dec 20, 2023 9:28 am

I am not surprised.

But it does not work that way. They can't say "we want to connect to a SMTP server using all latest and greatest protocols" and "we don't want to install anything new on the system". New functionality requires new software.

If they don't like Python but can live with Java, then JavaMail library can also do it.

I would expect Perl to also be able to do it - I am just totally clueless about Perl.

If one searched Github then I would expect to find some C libraries as well if one prefer native code.

Obviously it will be a lot easier the day callable mail and MAIL support extsmtp%"..." connecting to an external SMTP server using a system wide (S:RWED,O:RWED,G,W) protected config file.

But VSI got a long list of VMS enhancements to work through. It may take time to get to this. And that is assuming they see the need, which I have no idea if is the case.

And I suspect that the new solution would be VMS 9.3 or later only - no backport to VMS 8.4-2Lx Alpha or VMS 8.4-2Lx Itanium.
Arne
arne@vajhoej.dk
VMS user since 1986


craigberry
Contributor
Posts: 23
Joined: Fri Nov 17, 2023 11:27 am
Reputation: 1
Status: Offline

Re: SMTP servers requiring encryption of authentication not useable from VMS Mail

Post by craigberry » Wed Dec 20, 2023 9:46 am

sendEmail is a Perl program that can send mail using TLS, assuming the additional modules to make that work have been installed. I've used it successfully on VMS:

https://github.com/zehm/sendEmail

So, yes, there are workarounds and add-ons that can get the job done. But having modern mail capabilities out of the box would be a big help for the many scenarios where building a custom solution is either inconvenient or impossible.

User avatar

cct
Master
Posts: 117
Joined: Sat Aug 15, 2020 9:00 am
Reputation: 0
Location: Cambridge, UK
Status: Offline

Re: SMTP servers requiring encryption of authentication not useable from VMS Mail

Post by cct » Wed Dec 20, 2023 9:58 am

Maybe just an SMTP client?

I use msmtp on my linux machines - only interested in sending mail

Chris
--
Chris

User avatar

arne_v
Master
Posts: 335
Joined: Fri Apr 17, 2020 7:31 pm
Reputation: 0
Location: Rhode Island, USA
Status: Offline
Contact:

Re: SMTP servers requiring encryption of authentication not useable from VMS Mail

Post by arne_v » Wed Dec 20, 2023 11:25 am

cct wrote:
Wed Dec 20, 2023 9:58 am
Maybe just an SMTP client?

I use msmtp on my linux machines - only interested in sending mail
https://github.com/marlam/msmtp

says:
msmtp runs on a wide variety of platforms. It needs little more than an ANSI C
compiler and Berkeley-style sockets. It does not require any additional libraries,
but it can use the following to enhance its feature set:
- GnuTLS. The GnuTLS library provides TLS support.
Alternatively, libtls from the LibreSSL project can be used.
- GNU SASL. Using the GNU SASL library adds support for some additional
authentication methods, including SCRAM-* and GSSAPI.
- GNU libidn2. On modern Linux systems with recent glibc and GnuTLS
libraries, msmtp has automatic support for Internationalized Domain Names
(IDN). On other systems, IDN support is available via libidn2.
VMS got ANSI C and BSD sockets.

But to get TLS we would need GnuTLS. I wonder if GnuTLS has been ported to VMS.
Arne
arne@vajhoej.dk
VMS user since 1986


goathunter
Contributor
Posts: 13
Joined: Mon Jun 24, 2019 7:21 am
Reputation: 0
Status: Offline

Re: SMTP servers requiring encryption of authentication not useable from VMS Mail

Post by goathunter » Wed Dec 20, 2023 3:45 pm

cct wrote:
Sun May 14, 2023 11:43 am
Problem there is I don't believe they have anything for X86 VMS
I don't have a timeframe yet, but we do plan to release both PMDF and PMAS (our anti-spam package) for OpenVMS X86_64. I have the proxy version of PMAS already running in-house on X86_64.

Hunter

Post Reply