阿里云25号端口禁用无法发送邮件解决办法

阿里云为了防止垃圾邮件泛滥，将25端口禁用了，下面给出解决办法

安装对应的数字证书：这里请求安装网易126邮箱数字证书，也可以安装别的证书

一：126邮箱证书安装

mkdir -p /root/.certs/
echo -n | openssl s_client -connect smtp.126.com:465 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ~/.certs/126.crt
certutil -A -n "GeoTrust SSL CA" -t "C,," -d ~/.certs -i ~/.certs/126.crt
certutil -A -n "GeoTrust Global CA" -t "C,," -d ~/.certs -i ~/.certs/126.crt
certutil -L -d /root/.certs

接下来是安装mailx,安装mailx前关闭postfix
二：在配置文件 vim /etc/mail.rc 末尾添加邮箱相关授权信息

set from=xxx@qq.com   #开启SMTP服务的邮箱
set smtp=smtps://smtp.126.com:465
set smtp-auth-user=xxx@126.com
set smtp-auth-password=xxxxxx    #邮箱的授权码
set smtp-auth=login
set ssl-verify=ignore
set nss-config-dir=/root/.certs   #证书所在目录

三：安装完成后发送可能会失败，这个时候需要以下命令解决问题

cd /root/.certs/
certutil -A -n "GeoTrust SSL CA - G3" -t "Pu,Pu,Pu" -d ./ -i 126.crt
echo "zabbix" | mail -s "test" hw226234@126.com

腾讯QQ邮箱证书安装

mkdir -p /root/.certs/

echo -n | openssl s_client -connect smtp.qq.com:465 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ~/.certs/qq.crt

certutil -A -n "GeoTrust SSL CA" -t "C,," -d ~/.certs -i ~/.certs/qq.crt

certutil -A -n "GeoTrust Global CA" -t "C,," -d ~/.certs -i ~/.certs/qq.crt

certutil -A -n "GeoTrust SSL CA - G3" -t "Pu,Pu,Pu" -d ~/.certs/./ -i qq.crt

certutil -L -d /root/.certs

下面的配置和上面的一样