After updating sSMTP to version 2.61 I cannot send mail via gmail

Question

I updated sSMTP to version 2.61 and now when I try to us it I receive the following error:

ssmtp: Cannot open smtp.gmail.com:587

I can connect via telnet to their address, but sSMTP seems to get tripped up and Im not sure what changed after the update.

Here is the ssmtp.conf

[email protected]
mailhub=smtp.gmail.com:587
RewriteDomain=gmail.com
Hostname=localhost
UseTLS=YES
UseSTARTTLS=Yes
AuthUser=XXXXX
AuthPass=XXXXX
FromLineOverride=yes

Output when connecting via telnet:

[root@soupcan sbin]# telnet smtp.gmail.com 587
Trying 74.125.142.108...
Connected to smtp.gmail.com.
Escape character is '^]'.
220 mx.google.com ESMTP l7sm7330049igx.2 - gsmtp
quit
221 2.0.0 closing connection l7sm7330049igx.2 - gsmtp
Connection closed by foreign host.

And the output when I try to use sSMTP

[root@soupcan sbin]# /usr/sbin/ssmtp -v [email protected] < /home/user/Documents/Scripts/msg.txt
[<-] 220 mx.google.com ESMTP f5sm7367852igc.4 - gsmtp
[->] EHLO localhost
[<-] 250 CHUNKING
[->] STARTTLS
[<-] 220 2.0.0 Ready to start TLS
ssmtp: Cannot open smtp.gmail.com:587

EDIT Turning on debug logging I now see this, Im still digging:

SSL not working: certificate verify failed (20)

EDIT 2 This has been resolved by adding the following to my ssmtp.conf file

TLS_CA_File=/etc/pki/tls/certs/ca-bundle.crt

Found information from HERE and HERE

Answer 1

This has been resolved by adding the following to my ssmtp.conf file

TLS_CA_File=/etc/pki/tls/certs/ca-bundle.crt

Found information from HERE and HERE

Answer 2

FYI -- For Ubuntu the .crt file is in a different place and should read:

TLS_CA-File=/etc/ssl/certs/ca-certificates.crt

Adding this enabled me to connect to my SMTP server via STARTTLS on port 587 with the settings:

mailhub=smtp.{myserver}.com:587
AuthUser={username}    
AuthPass={password}
UseSTARTTLS=YES 
UseTLS=NO
TLS_CA_File=/etc/ssl/certs/ca-certificates.crt

My mail server is configured to use STARTTLS and not SSL or TLS.

If I set UseTLS=YES, it fails. It has to be exclusively UseSTARTTLS=YES, not both. I don't know if other mail servers can do both at the same time, but mine does not.

Answer 3

Use the setup found here:

Simplest way to send one-line mail out via command line using gmail?

Excerpt:

root=rpi3abc@gmail
mailhub=smtp.gmail.com:465
FromLineOverride=YES
[email protected]
AuthPass=testing123
UseTLS=YES

It is as simple as that.