Get error on recept mail in Postal

[williank]

I get bellow error on receive message in my Postal ...

smtp-1    | 2024-10-07 19:14:34 +0000 DEBUG  Client identified as 209.85.128.173 trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 DEBUG  <= EHLO mail-yw1-f173.google.com trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 DEBUG  => 250-My capabilities are trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 DEBUG  => 250-STARTTLS trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 DEBUG  => 250 AUTH CRAM-MD5 PLAIN LOGIN trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 DEBUG  <= STARTTLS trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 DEBUG  => 220 Ready to start TLS trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  An error occurred while processing data from a client. trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  Errno::EACCES: Permission denied @ rb_sysopen - /config/smtp.key trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  /opt/postal/app/app/lib/smtp_server/server.rb:14:in `read' trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  /opt/postal/app/app/lib/smtp_server/server.rb:14:in `tls_private_key' trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  /opt/postal/app/app/lib/smtp_server/server.rb:65:in `ssl_context' trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  /opt/postal/app/app/lib/smtp_server/server.rb:226:in `block (2 levels) in run_event_loop' trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  /opt/postal/app/app/lib/smtp_server/server.rb:106:in `select' trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  /opt/postal/app/app/lib/smtp_server/server.rb:106:in `block in run_event_loop' trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  /opt/postal/app/app/lib/smtp_server/server.rb:104:in `loop' trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  /opt/postal/app/app/lib/smtp_server/server.rb:104:in `run_event_loop' trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  /opt/postal/app/app/lib/smtp_server/server.rb:39:in `block in run' trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  /usr/local/bundle/gems/klogger-logger-1.4.0/lib/klogger/group_set.rb:18:in `call_without_id' trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  /usr/local/bundle/gems/klogger-logger-1.4.0/lib/klogger/logger.rb:72:in `tagged' trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  /opt/postal/app/app/lib/smtp_server/server.rb:37:in `run' trace_id=WOGXSK33 component=smtp-server
smtp-1    | 2024-10-07 19:14:35 +0000 ERROR  script/smtp_server.rb:13:in `<main>' trace_id=WOGXSK33 component=smtp-server

[willpower232]

Errno::EACCES: Permission denied @ rb_sysopen - /config/smtp.key

Did you provide an SSL certificate to Postal? It might also have incorrect permissions. I believe you can check with postal bash smtp and ls -hal /config/smtp.key

[williank]

I disabled tls in smtp and everything now flows fine, sending and receiving.

root@postal:~# postal bash smtp
postal@postal:~/app$ ls -hal /config/smtp.key
-rw------- 1 root root 3.2K Oct  7 00:15 /config/smtp.key
postal@postal:~/app$ cat /config/smtp.key
cat: /config/smtp.key: Permission denied
postal@postal:~/app$ cat /config/smtp.key

smtp_server:
#  tls_enabled: true
  default_bind_address: "::"

But I'm afraid the ideal is for it to be enabled

[willpower232]

if you're using the regular install with docker compose then you need to put the key and certificate in the same folder as the config file and then they should appear in /config/ in the docker container.

I think there was someone who figured out how to get the caddy certificate round here somewhere