logstash email插件报错 OpenSSL::SSL::SSLError: hostname “***.com“ does not match the server certificate

偏执的太偏执、 2022-12-22 06:23 175阅读 0赞

使用公司的邮件服务器信息配置logstash email发邮件总是报如下错误信息：

[2020-11-13T10:45:30,791][ERROR][logstash.outputs.email   ] Something happen while delivering an email {:exception=>#<OpenSSL::SSL::SSLError: hostname "***.com" does not match the server certificate>}

经过查询发现是可以增加一个配置解决，参考：[https://stackoverflow.com/questions/4505795/rails-3-opensslsslsslerror-hostname-was-not-match-with-the-server-certific][https_stackoverflow.com_questions_4505795_rails-3-opensslsslsslerror-hostname-was-not-match-with-the-server-certific]

:openssl_verify_mode  => 'none'

logstash-out-email插件的代码是没有这个配置的，github地址：[https://github.com/logstash-plugins/logstash-output-email][https_github.com_logstash-plugins_logstash-output-email]

代码文件：[logstash-output-email][https_github.com_logstash-plugins_logstash-output-email]/[lib][]/[logstash][]/[outputs][]/**email.rb**

options = {
          :address              => @address,
          :port                 => @port,
          :domain               => @domain,
          :user_name            => @username,
          :password             => @password,
          :authentication       => @authentication,
          :enable_starttls_auto => @use_tls,
          :debug                => @debug
        }

因此测试增加openssl\_verify\_mode  => 'none'这个配置是否可行，需要修改logstash-output-email插件代码

修改完后配置如下：

config :openssl_verify_mode, :validate => :string, :default => "none"
    
    options = {
          :address              => @address,
          :port                 => @port,
          :domain               => @domain,
          :user_name            => @username,
          :password             => @password,
          :authentication       => @authentication,
          :enable_starttls_auto => @use_tls,
          :openssl_verify_mode  => @openssl_verify_mode,
          :debug                => @debug
        }

编译后安装包：[https://github.com/devpail/logstash-output-mail/blob/master/logstash-output-mail-1.0.0.gem][https_github.com_devpail_logstash-output-mail_blob_master_logstash-output-mail-1.0.0.gem]

离线安装包：[https://github.com/devpail/logstash-output-mail/blob/master/logstash-output-mail-1.0.0.zip][https_github.com_devpail_logstash-output-mail_blob_master_logstash-output-mail-1.0.0.zip]

安装包使用：[https://blog.csdn.net/daocaoren92wq/article/details/109703091][https_blog.csdn.net_daocaoren92wq_article_details_109703091]

插件使用和logstash-output-email相同，只是把配置项名字由email改成了mail，例子：

output {
      if "shouldmail" in [tags] {
        mail {
          to => 'technical@example.com'
          from => 'monitor@example.com'
          subject => 'Alert - %{title}'
          body => "Tags: %{tags}\\n\\Content:\\n%{message}"
          template_file => "/tmp/email_template.mustache"
          domain => 'mail.example.com'
          port => 25
        }
      }
    }

**参考：**

编译logstash插件安装包：[https://www.jianshu.com/p/5dc06601af9e][https_www.jianshu.com_p_5dc06601af9e]

[https_stackoverflow.com_questions_4505795_rails-3-opensslsslsslerror-hostname-was-not-match-with-the-server-certific]: https://stackoverflow.com/questions/4505795/rails-3-opensslsslsslerror-hostname-was-not-match-with-the-server-certific
[https_github.com_logstash-plugins_logstash-output-email]: https://github.com/logstash-plugins/logstash-output-email
[lib]: https://github.com/logstash-plugins/logstash-output-email/tree/master/lib
[logstash]: https://github.com/logstash-plugins/logstash-output-email/tree/master/lib/logstash
[outputs]: https://github.com/logstash-plugins/logstash-output-email/tree/master/lib/logstash/outputs
[https_github.com_devpail_logstash-output-mail_blob_master_logstash-output-mail-1.0.0.gem]: https://github.com/devpail/logstash-output-mail/blob/master/logstash-output-mail-1.0.0.gem
[https_github.com_devpail_logstash-output-mail_blob_master_logstash-output-mail-1.0.0.zip]: https://github.com/devpail/logstash-output-mail/blob/master/logstash-output-mail-1.0.0.zip
[https_blog.csdn.net_daocaoren92wq_article_details_109703091]: https://blog.csdn.net/daocaoren92wq/article/details/109703091
[https_www.jianshu.com_p_5dc06601af9e]: https://www.jianshu.com/p/5dc06601af9e