Welcome to the Cumulus Support forum.

Latest Cumulus MX V3 release 3.28.5 (build 3282) - 23 February 2024

Cumulus MX V4 beta test release 4.0.0 (build 4017) - 17 March 2024

Legacy Cumulus 1 release v1.9.4 (build 1099) - 28 November 2014 (a patch is available for 1.9.4 build 1099 that extends the date range of drop-down menus to 2030)

Download the Software (Cumulus MX / Cumulus 1 and other related items) from the Wiki

Email alerts with gmail account

From build 3044 the development baton passed to Mark Crossley. Mark has been responsible for all the Builds since. He has made the code available on GitHub. It is Mark's hope that others will join in this development, but at the very least he welcomes your ideas for future developments (see Cumulus MX Development suggestions).

Moderator: mcrossley

Post Reply
User avatar
KarlS
Posts: 135
Joined: Tue 30 Nov 2010 3:01 pm
Weather Station: Ecowitt GW1003 / WH32 / WH41
Operating System: Buster Lite on Pi4
Location: Bridge Lake, BC, Canada
Contact:

Email alerts with gmail account

Post by KarlS »

Today I got an email from Google:
A suspicious app was blocked from accessing your account
Following a link for an explanation I got:
To help keep your account secure, starting May 30, 2022, Google will no longer support the use of third-party apps or devices which ask you to sign in to your Google Account using only your username and password.
The "suspicious app" turned out to be CumulusMX, trying to alert me of an error. I have successfully used the settings below for a long time:
email.jpg
This is the relevant part from the MXdiags file:
2022-05-13 06:39:21.690 SendEmail: Error - MailKit.Security.SslHandshakeException: An error occurred while attempting to establish an SSL or TLS connection.

When connecting to an SMTP service, port 587 is typically reserved for plain-text connections. If
you intended to connect to SMTP on the SSL port, try connecting to port 465 instead. Otherwise,
if you intended to use STARTTLS, make sure to use the following code:

client.Connect ("smtp.gmail.com", 587, SecureSocketOptions.StartTls);
---> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER
at /build/mono-2liaiA/mono-5.18.0.240+dfsg/external/boringssl/ssl/tls_record.c:217
at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00054] in <a9a08e39ba304bd0a84c49bd158dfc02>:0
at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000c6] in <a9a08e39ba304bd0a84c49bd158dfc02>:0
at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <a9a08e39ba304bd0a84c49bd158dfc02>:0
at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x0012a] in <a9a08e39ba304bd0a84c49bd158dfc02>:0
at Mono.Net.Security.AsyncProtocolRequest.StartOperation (System.Threading.CancellationToken cancellationToken) [0x000a4] in <a9a08e39ba304bd0a84c49bd158dfc02>:0
--- End of inner exception stack trace ---
at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00336] in <a9a08e39ba304bd0a84c49bd158dfc02>:0
--- End of inner exception stack trace ---
at MailKit.Net.Smtp.SmtpClient.ConnectAsync (System.String host, System.Int32 port, MailKit.Security.SecureSocketOptions options, System.Boolean doAsync, System.Threading.CancellationToken cancellationToken) [0x002a3] in <eabb09d1c9ea4e16807c3441ccbaf11a>:0
at MailKit.Net.Smtp.SmtpClient.Connect (System.String host, System.Int32 port, MailKit.Security.SecureSocketOptions options, System.Threading.CancellationToken cancellationToken) [0x00012] in <eabb09d1c9ea4e16807c3441ccbaf11a>:0
at CumulusMX.EmailSender.SendTestEmail (System.String[] to, System.String from, System.String subject, System.String message, System.Boolean isHTML) [0x0011e] in <97834895e3104302abf6a91184c2a0c5>:0
For the next few weeks I can configure Gmail to accept insecure applications, but starting June I will be out of luck. Do I have to change my settings (how?) or does the CumulusMX email module have to be updated/replaced?
You do not have the required permissions to view the files attached to this post.
User avatar
PaulMy
Posts: 3760
Joined: Sun 28 Sep 2008 11:54 pm
Weather Station: Davis VP2 Plus 24-Hour FARS
Operating System: Windows8 and Windows10
Location: Komoka, ON Canada
Contact:

Re: Email alerts with gmail account

Post by PaulMy »

Hi Karl,
I am not using gmail for my CumulusMX alarms but using the GoDaddy provided email services, and that works well.
However, for my Reolink camera I got the following information from Reolink support on the two-step verification. Not sure if this may be helpful to you:
Victoria (Reolink)
Jan 11, 2022, 14:03 GMT+8
Hello Paul...,
Thank you for contacting us.
This Gmail address are ok. But the problem is from the password and port.
SMTP server is "smtp.gmail.com"
Port is 465 or 587.
As for the password, you should not enter the password of your email address but the App password, a 16-characters number. About the App password, please refer to How to Generate an APP Password in Gmail Email Account
In this step, please remmeber to turn on the two-step vertification.
Anything we can help you with, please do not hesitate to contact us.
Have a nice day.
Best Regards,
Reolink Support Team
That reply included a screen capture for security settings. I can't exactly remember all what I had to do, but with lots of trial and error I got it to work.

Enjoy,
Paul
You do not have the required permissions to view the files attached to this post.
Davis Vantage Pro2+
C1 www.komokaweather.com/komokaweather-ca
MX www.komokaweather.com/cumulusmx/index.htm /index.html /index.php
MX www.komokaweather.com/cumulusmxwll/index.htm /index.html /index.php
MX www. komokaweather.com/cumulusmx4/index.htm

Image
User avatar
mcrossley
Posts: 12641
Joined: Thu 07 Jan 2010 9:44 pm
Weather Station: Davis VP2/WLL
Operating System: Bullseye Lite rPi
Location: Wilmslow, Cheshire, UK
Contact:

Re: Email alerts with gmail account

Post by mcrossley »

As Paul says, if you are, you shouldn't be using your user password. You should create an application password. If you have two factor authentication switched on for Google (and you should) that is the only way applications can use Google email.
User avatar
KarlS
Posts: 135
Joined: Tue 30 Nov 2010 3:01 pm
Weather Station: Ecowitt GW1003 / WH32 / WH41
Operating System: Buster Lite on Pi4
Location: Bridge Lake, BC, Canada
Contact:

Re: Email alerts with gmail account

Post by KarlS »

Well ....

In order to set up two factor authorisation you need a cell phone ... and I don't have one. There is no cell phone coverage in our area so owning a cell phone would be pointless :bash:
User avatar
mcrossley
Posts: 12641
Joined: Thu 07 Jan 2010 9:44 pm
Weather Station: Davis VP2/WLL
Operating System: Bullseye Lite rPi
Location: Wilmslow, Cheshire, UK
Contact:

Re: Email alerts with gmail account

Post by mcrossley »

You don't have to use a mobile text messages for 2FA, you an also use a hardware device like a Yubikey, or an Authenticator app (I recommend the Microsoft Authenticator rather than the Google version) either on you computer or mobile if you had one! - they work offline.
User avatar
KarlS
Posts: 135
Joined: Tue 30 Nov 2010 3:01 pm
Weather Station: Ecowitt GW1003 / WH32 / WH41
Operating System: Buster Lite on Pi4
Location: Bridge Lake, BC, Canada
Contact:

Re: Email alerts with gmail account

Post by KarlS »

Sadly, either of the authentication apps only work on mobiles (cell phone or tablet) ... which I don't have. And I'm not going to buy a hardware device (would it even work on a Raspi?), so I guess I will have to live without the Cumulus email alerts.
User avatar
PaulMy
Posts: 3760
Joined: Sun 28 Sep 2008 11:54 pm
Weather Station: Davis VP2 Plus 24-Hour FARS
Operating System: Windows8 and Windows10
Location: Komoka, ON Canada
Contact:

Re: Email alerts with gmail account

Post by PaulMy »

When I setup mine I used my Windows 10 PC, no cell or tablet involved.
From my gmail.com after sign in, click on the [3x3-dot] Google app icon in upper right, select Account > Security

Enjoy,
Paul
Davis Vantage Pro2+
C1 www.komokaweather.com/komokaweather-ca
MX www.komokaweather.com/cumulusmx/index.htm /index.html /index.php
MX www.komokaweather.com/cumulusmxwll/index.htm /index.html /index.php
MX www. komokaweather.com/cumulusmx4/index.htm

Image
User avatar
KarlS
Posts: 135
Joined: Tue 30 Nov 2010 3:01 pm
Weather Station: Ecowitt GW1003 / WH32 / WH41
Operating System: Buster Lite on Pi4
Location: Bridge Lake, BC, Canada
Contact:

Re: Email alerts with gmail account

Post by KarlS »

Hi Paul,

I'm not getting it. When I sign into my Gmail account, go to security and try to set up 2-step verification I get the following screen:
2-step.jpg
There's no device listed under "These devices can get prompts" because I don't have any! When I click "Don't see your device", I get instructions on how to set up an Android phone or iPhone (which I don't have). When I click on "Show more options" Google suggests either a security key or at text message/telefon call (ridiculous). This world is not (anymore) made for people who don't own mobile devices.
You do not have the required permissions to view the files attached to this post.
Cortmalaw
Posts: 92
Joined: Sat 26 Dec 2020 2:21 pm
Weather Station: Davis
Operating System: Raspbian
Location: Near Glasgow, Scotland, UK

Re: Email alerts with gmail account

Post by Cortmalaw »

Not sure what you've done differently!
For 'devices' I get a list of multiple tablets, Raspberry Pis, laptops and desktop PCs that I have used to access Gmail over many years, as well as my phone. Have you NEVER accessed Gmail from Windows or other compuer before (maybe you have been using a mail program such as Outlook rather than a web browser??)
Also, the phone call can be to a landline.
Definitely does not require a mobile phone.
User avatar
mcrossley
Posts: 12641
Joined: Thu 07 Jan 2010 9:44 pm
Weather Station: Davis VP2/WLL
Operating System: Bullseye Lite rPi
Location: Wilmslow, Cheshire, UK
Contact:

Re: Email alerts with gmail account

Post by mcrossley »

The Google help page explains that if you do not have access to a mobile you do not have to use one. It does recommend Google Prompts on a mobile, but then shows you that you can select other methods including an Authenticator app. I see those other options on my account.

I do not see the authenticator option on your screen shot for some reason, but it does show "voice call" as an alternative. Presumably you do have a phone of some sort? Once 2FA is enabled then you can add more authentication options including plain recovery keys.

Once you have 2FA switched on, you can then disable it on the computer you normally use by saying it is a trusted device.

The 2FA is nothing to do with Cumulus, it just needs to be enabled to add an application password that Cumulus can use.
Post Reply