NetWitness email notification is not working without any errors.

[#1]

Article Number

000039996

Applies To

RSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: Security Analytics Server
RSA Version/Condition: 11.5.x
Platform: Centos 7

Issue

User can't get any email notifications.
User configured smtp.gmail.com as email notification server of Global Notification. "Test Connection" is passing on port 465.

There are not any error messages in integration-server.log.

2021-12-15 00:31:50,013 [unchMessageListenerContainer-8] INFO       SystemOperation|Forwarding 0 left over items before shutting down service
2021-12-15 00:31:50,014 [unchMessageListenerContainer-8] INFO          Notification|Initialized SMTP dispatcher for 61b7e867e4b017fd96e2ae4d (max-pending=100, max-per-minute=500)

curl and openssl connect test to the smtp server also passed.

# curl -v smtp.gmail.com:465
* About to connect() to smtp.gmail.com port 465 (#0)
*   Trying 64.233.188.108...
* Connected to smtp.gmail.com (64.233.188.108) port 465 (#0)
> GET / HTTP/1.1
> User-Agent: curl/7.29.0
> Host: smtp.gmail.com:465
> Accept: */*
>
* Recv failure: Connection reset by peer
* Closing connection 0
curl: (56) Recv failure: Connection reset by peer

# openssl s_client -connect smtp.gmail.com:465
CONNECTED(00000003)
depth=3 C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA
verify return:1
depth=2 C = US, O = Google Trust Services LLC, CN = GTS Root R1
verify return:1
depth=1 C = US, O = Google Trust Services LLC, CN = GTS CA 1C3
verify return:1
depth=0 CN = smtp.gmail.com
verify return:1
---

 

Cause

'verify-certificates' parameter of Integration Server could block the email notification without any messages.

Resolution

Please follow the steps to set the 'verify-certificates' to 'false'

Step1: In the UI, go to Admin - Services - Integration Server - Explore page.

Step2: Set /rsa/security/pki/verify-certificates parameter to 'false'

Image description