Microsoft 365 TLS 1.0 Relay from Evolution via SMTP

Hi All,

As you may or may not know, Microsoft 365 has decomissioned TLS1.0 unless you opt in for legacy support by enabling it via PowerShell.

Sage 200 Evolution does not have an option to adjust the TLS version (1.0, 1.1, 1.2, 1.3) under the System Wizard which leads me to believe it still uses TLS1.0 only.
We have been successful in enabling legacy support for M365 and allowing TLS1.0 support however a Wireshark interrogation of the traffic indicates that outbound mail relay still occurs via TLS1.2, causing it not to work by means of a "Socket Error".

Thus, Microsoft 365 Exchange Online is no longer a valid SMTP configuration for Evolution? It works by selecting the "Outlook" option via the System Wizard but for some of our use cases "Outlook" is not an option, only SMTP.


Both SMTP relay and the "Send As" function under the Microsoft Admin panel has been enabled too and works perfectly when testing via PowerShell or a TLS1.2 enabled device/service.
This used to work without issue prior to January 2022 before 1.0 was decomissioned.

Microsoft 365 announced in 2018 already the intent to decomission TLS1.0 but "Office 365" still remains an option under Evolution's SMTP configuration? 

Anyone facing the same problem?

Parents Reply Children
  • 0 in reply to Bennie Pienaar

    Hi Bennie,

    Just an update.  I tested on Evolution V10.1.3.008 and it worked perfectly.

    Interestingly enough when I performed a mail header analysis on the email received from the system I could see and confirm what my hunch was about the TLS level being TLS1.2 and not TLS1.0.  
    TLS 1.0 is not used when sending via smtp.office365.com nor smtp-legacy.office365.com; both use TLS1.2. So irrespective of configuring legacy support on the MS Tenant and using smtp-legacy.office365.com; it does not work on Evo V7.20.9.

    See below which was extracted from the header whilst using smtp-legacy.office365.com.

    "Received: from JNAP275MB0543.ZAFP275.PROD.OUTLOOK.COM (2603:1086:0:28::9) by
     JN1P275MB0411.ZAFP275.PROD.OUTLOOK.COM (2603:1086:0:d::5) with Microsoft SMTP
     Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
     15.20.5017.23; Thu, 24 Feb 2022 11:16:32 +0000
    Received: from JNAP275MB0543.ZAFP275.PROD.OUTLOOK.COM"

    At least now we now know what TLS protocol is interrogated which is great.

    Thank you for suggesting the later versions.  I am not sure whether it works on all V10 builds as I have only tested on 10.1.3.008.
    I may investigate that further to see if we can assist the companies that relies on the builds they are currently on.

    Best,

    Armand

  • 0 in reply to Armand Marx

    Thanks for the valuable insights that you shared here, Armand.

    Yes, I can confirm that all of the never Evolution versions are making use of TLS 1.2 

    The current latest version is 10.1.3.09 and is available on the Sage FTP site