theAARONLOY / /

Top Menu

  • Home
  • About
  • Contact
  • Disclaimer

Main Menu

  • Rants
  • Singapore
  • World
  • Life
  • Art
  • Food
  • Travels
  • Music
  • Games
  • Astronomy
  • Tech
  • Science
  • Eco
  • Business
  • Finance
  • Bargains
  • Randomness
  • Scam Watch
  • How To
  • Home
  • About
  • Contact
  • Disclaimer

theAARONLOY / /

theAARONLOY / /

  • Rants
  • Singapore
  • World
  • Life
  • Art
  • Food
  • Travels
  • Music
  • Games
  • Astronomy
  • Tech
  • Science
  • Eco
  • Business
  • Finance
  • Bargains
  • Randomness
  • Scam Watch
  • How To
How To
Home›How To›How to (Possibly) Fix “TLS Negotiation failed, the certificate doesn’t match the host.” Gmail Error

How to (Possibly) Fix “TLS Negotiation failed, the certificate doesn’t match the host.” Gmail Error

By aaron loy
April 20, 2020
2508
0
Share:

Using Gmail to manage your emails?

Me too.

Suddenly getting the “TLS Negotiation failed, the certificate doesn’t match the host.” Error?

Same. Apparently, I’m not the only one.

After some trial and error, I seem to have fixed it. Like, really fixed it.

A. Temporary Solution

As many in the forum message suggest, it’s a encryption certification issue.

That’s why the only real suggestion in the google help thread that works so far is the one about using an Unsecured Connection on port 25. But that’s not good enough yes?

Please don’t ever use unsecured email protocols. This is a temporary solution at best, while you work out the real problem.

B. Possible *Permanent* Fix

I’m going to assume that you have control over your domain and WebHost. By now, most of you should be on some sort of SSL certificate, like the free one from Let’s Encrypt. If you haven’t upgraded your sites to use secured HTTPS instead, you should check it out.

In summary, you need to make sure that whatever mail-related subdomains you’re using (smtp.youdomain, mail.yourdomain, etc) are included in your SSL/TLS Certificates.

Some SLS/TLS control panels might have each component of the domain separated for certification.
In this case, make sure the mail related subdomains have been included. If that doesn’t work, try adding a wildcard certification.

1. Check your SSL/TLS cert control panel.

Some hosts have ‘components’ you can choose to secure. Make sure your Mail Access components like IMAP, SMTP and POP is selected. If not selected previously, select them now and reissue the cert.

2. Wildcard Certification

If that still doesn’t work (which it didn’t in my case), try adding a wildcard certification. Wildcard certs automatically certify any sub-domains, which will include mail.yourdomain and smtp.yourdomain.

2a. Cloudflare / CDNs

If you’re using Cloudflare or other CDNs, depending on how you set it up, you might need to manually create a TXT Record in your DNS settings in Cloudflare. Check for instructions from your WebHost.

3. Set Gmail Encryption Settings

Go back to Gmail, and choose your preferred secured method of email communication. Use whatever subdomain you were using previously (switching to mail.yourdomain to smtp.yourdomain, or vice versa, doesn’t fix the problem). As a reference, I used to be on Secured TLS on 25 before this problem. Using 465 SSL now. Make sure you test with 2-3 emails a few minutes apart. Sometimes when the problem isn’t fixed, the first mail would still go through, but subsequent ones wouldn’t, and you’re back to square one.

I’ve tried to be as general yet as detailed as possible because there are so many different settings, hope I haven’t confused anyone.

What Caused This Problem?

According to an expert on the google help thread, it seems like google recently started stricter reinforcement of encryption certificates. 

Just like the recent push for HTTPS, this is a step in the right direction, in my opinion. So, endure the inconvenience for now?

(Header image from Google’s Gmail ‘about’ page)

Previous Article

Yunomori Onsen & Spa (Singapore)

0
Shares
  • 0
  • +
  • 0
  • 0
  • 0
  • 0

Related articles More from author

  • How ToSingaporeTech

    How to Logon to [email protected] in Windows 8.1

    February 16, 2015
    By aaron loy
  • How ToInternet Marketing

    Enable Font Size Menu in TinyMCE WordPress (Easy)

    March 17, 2015
    By aaron loy
  • How ToTech

    Digital TV Antenna Hack – Cheap, Easy, And..Free?

    March 15, 2016
    By aaron loy
  • How ToInternet MarketingTech

    How To Change Font Size in WordPress / TinyMCE

    March 18, 2015
    By aaron loy
  • GamesHow To

    Running Homeworld 1, 2 and Cataclysm on Windows 7 / 8 / 8.1

    May 3, 2014
    By aaron loy
  • BargainsHow ToSingaporeTech

    Digital TV Antenna Singapore (Free!)

    January 27, 2018
    By aaron loy

  • BargainsLifeSingapore

    doob bean bag Review

  • SingaporeTech

    Top 2 Mistakes Made When Choosing Internet Service Providers

  • Tech

    Soundbars With No HDMI Inputs – A Compromise?

  • 101
    Followers
  • 177
    Likes
  • 2720
    Subscribers
Cheap Supplements Online Store Singapore!
Cheap Supplements Online Store Singapore!
YouTube subscribe button by Skipser
Sudio Vasa Bla Unboxing, Colour Preview (Review Link Inside)
Heineken, Gives You Wind(s)
How To Keep Garlic & Onion Powder from Hardening
By PoseLab
Visit Youtube Channel




Advertisement

Support the World Wildlife Fund

Double NASA's Abysmal Budget!

Double NASA's Abysmal Budget!

  • Recent

  • Popular

  • Comments

  • How to (Possibly) Fix “TLS Negotiation failed, the certificate doesn’t match the host.” Gmail Error

    By aaron loy
    April 20, 2020
  • Yunomori Onsen & Spa (Singapore)

    By aaron loy
    January 31, 2018
  • Digital TV Antenna Singapore (Free!)

    By aaron loy
    January 27, 2018
  • Sudio Tre Review

    By aaron loy
    January 14, 2018
  • Wolfenstein 2: The New Colossus Discount

    By aaron loy
    October 25, 2017
  • Where to Buy Bean Bags in Singapore

    By aaron loy
    August 31, 2014
  • Starcraft 2: Heart Of The Swarm – Getting Collector’s Edition for Singapore & Asia

    By aaron loy
    March 2, 2013
  • Mass Effect 3 Ending – Why I Feel the it’s ‘Epic – Poetic’

    By aaron loy
    April 3, 2012
  • Sony’s New Mirrorless Full Frame NEX Camera – Why It Might Work

    By aaron loy
    August 15, 2013
  • Who Should Be Ashamed, Mr Lee Hsien Loong?

    By aaron loy
    April 19, 2014
  • aaron loy
    on
    January 27, 2018

    Buta Kin 豚金. Good Price, Good Ramen?

    If you're a real ...
  • aaron loy
    on
    December 18, 2017

    Digital TV Antenna Hack – Cheap, Easy, And..Free?

    Got it, added it ...
  • Esther
    on
    December 15, 2017

    Digital TV Antenna Hack – Cheap, Easy, And..Free?

    hi aaron possible to put ...
  • Lai
    on
    December 7, 2017

    Digital TV Antenna Hack – Cheap, Easy, And..Free?

    yes his setup works ...
  • aaron loy
    on
    November 21, 2017

    MINISO Singapore, Another Chinese Ripoff, Arrives in Singapore

    I value integrity and ...

Disclaimer

Affiliate Links: Assume all outgoing links are affiliate links. Your price remains unchanged (you get better prices sometimes!), yet you'll be able to support the site. Also, this allows us to monetize the site without resorting to conflicting sponsorships. Non-Sponsored Reviews: Assume all reviews are not sponsored unless noted. Example: Most of my restaurant reviews are made unannounced, with food paid for by yours truly. I don't believe in PAP-style inspections and Gushcloud-ish BS. Full disclaimer here.
I ♥ SgBlogs.com Follow

Paperblog

PEPPERJAM