SSL TLS issue when sent email to gmail

Hello HestiaCP Community Support,

I am currently using HestiaCP installed on Docker to manage my email server. I have encountered an issue related to email security when sending emails from Roundcube to Gmail accounts. Specifically, when the emails are received in Gmail, they display the following security notice:

Security: No encryption

This indicates that the emails sent from my server are not encrypted during transit, which is a significant security concern.

Here are the details of my setup:

Control Panel:** HestiaCP
Installation Method:** Docker
Email Client:** Roundcube
Issue: Emails sent from Roundcube to Gmail show “No encryption” in Gmail

I have checked the HestiaCP and Docker configurations but haven’t been able to resolve the issue. Could you please provide guidance on how to ensure that outgoing emails are encrypted and do not show the “No encryption” warning in Gmail?

Screenshot from 2024-05-24 01-42-35

Hi @shrawan84,

Hestia is not supported under Docker.

Said that, Exim will always try to use STARTTLS if remote mail server supports and announces it so, something wrong is happening with that connection, your certificate, or…

What Exim’s logs say?

exigrep --no-pager '=>.*@gmail.com' /var/log/exim4/mainlog*

What are the versions you are using? OS, Hestia, Exim, Roundcube… Did you add a valid certificate for your mail host and mail domains? Did you configure SPF, DKIM, DMARC?

1 Like

Yes, I have generated valid certificates from Let’s Encrypt for the Mail host and mail domains. and i have created and passed all email authencation records like SPF, DKIM and DMARC

OS: PRETTY_NAME=“Debian GNU/Linux 10 (buster)”
Hestia Control Panel: v1.5.15
Exim version 4.92
Roundcube Webmail 1.5.2

Wow, that’s pretty old, I don’t know whether exim is configured to use TLS 1.2 and maybe that is the reason you can’t establish a TLS connection with gmail servers.

If you execute the exigrep command I posted previously, you should see the error.

1 Like

What do you suggest for this issue? How ccan i resolve this TLS issue ( No encryption ) and some things is also missing in email’s Header.

The docker version isn outdated as we don’t maintain it…

So install it as a new server…

1 Like

Thanks for reply but currently i am using Docker version 26.0.1, build d260a54 and i think its updated.

The issue isn’t the Docker version but the outdated versions of the OS, Hestia, Exim, etc. included in that docker container.

2 Likes

We are using Hestia version 1.5.15, and the current available version is 1.8.11. If we upgrade to this version, will the issue be resolved?

I don’t even know what the real problem is, you should check first the exim log. And again, is not only Hestia, is all, OS, Exim, Hestia, Roundcube…