Overview

After some of your members migrated to Gmail, which is encrypted, they are no longer receiving emails from your Lists. These members are asking if you can set outbound email for Opportunistic TLS, which is starttls, so they can receive your emails.

Prerequisites

• You have LM version 12.2.0 or newer.
• You have Administrator access to your LM webserver and nodes (if applicable).

Solution

To properly enable TLS on LM, enable encryption for both outgoing and incoming mailings. Enabling encryption may reduce the speed of mail delivery, depending on the volume of messages and specific server capabilities. If delivery speed becomes a factor, see the Enabling TLS Slows Down Message Delivery article for suggestions to improve it.

Complete each of the following sections below: Stop ListManager Services, Modify lmcfg.txt, and Start ListManager Services on your LM webserver and ListManager Nodes. 

Stop ListManager Services

Stop your ListManager services in Windows as Services, in Windows from the webserver, or in Linux.

Stop ListManager Services in Windows as Services

1. As a Windows Administrator on your webserver, click Start and type "Services"
2. Right-click on the ListManager Service
3. Click Stop
4. Right-click on the ListManagerWeb Service
5. Click Stop

Stop ListManager Services in Windows From the Webserver

1. As a Windows Administrator on your webserver, open the ListManager window
2. Press CTRL+C and the window will close
3. Open the ListManager webserver window
4. Press CTRL+C and the window will close

Stop ListManager Services in Linux

1. As root on your ListManager webserver, navigate to your ListManager directory. e.g. /usr/local/lm/bin
2. Enter ./S96lm stop to stop ListManager
3. Enter ./S96httpd-lm stop to stop ListManager webserver

Back to top

Modify lmcfg.txt

Locate the file and perform the following edits.

• Windows: C:\Program Files\ListManager\lmcfg.txt
• Linux: ~/ListManager/bin/lmcfg.txt

1. Add the following entries:
   

   # Enable Outbound Encryption
   $starttls_extension_enabled="true";
   # Enable Inbound Encryption
   $certificate_file=<PATH-FOR-CERTIFICATE>;
   $privatekey_file=<PATH-FOR-PRIVATE-KEY>;
   $incoming_smtp_starttls_extension_enabled="true";

   Please do not use any whitespaces around the equals sign, or alternative quote symbols in the configuration file.
   They may cause the settings to not be properly loaded.
2. Save the file

If you are performing this update on a ListManager Node, place copies of the ListManager webserver's certificates in the Node's certificate folder.

Parameter Information

Back to top

Start ListManager Services

Start your ListManager services in Windows as Services, in Windows from the webserver, or in Linux.

Start ListManager Services in Windows as Services

If ListManager is running as Services, use this method.

1. As a Windows Administrator on your webserver, click Start and type "Services"
2. Right-click on the ListManager Service
3. Click Start
4. Right-click on the ListManagerWeb Service
5. Click Start

Start ListManager Services in Windows Manually

If ListManager is not installed as Windows Services, use this method.

1. As a Windows Administrator on your webserver, click Start and type "cmd" to open the Command Prompt
2. Navigate to the ListManager installation directory. e.g. C:\Program Files\ListManager\tclweb\bin
3. Enter httpd-lm.exe

Start ListManager Services in Linux

1. As root on your ListManager webserver, navigate to your ListManager directory. e.g. /usr/local/lm/bin
2. Enter ./S96lm start to start ListManager
3. Enter ./S96httpd-lm start to start ListManager webserver

After stopping ListManager services, modifying the lmcfg.txt file, and restarting ListManager services your messages are no longer being rejected by Gmail.

Back to top