TLS reporter
by Johan Hop | HOP ICT Consultancy
27 Oct '25
27 Oct '25
Good afternoon,
We are testing the TLS reporter test environment.
We downloaded and installed the following tool from GitHub:
https://github.com/sys4/tlsrpt-reporter.git
We have created two services: tlsrpt-collectd and tlsrpt-reportd.
Both services are started and have an active and running status.
These are the logs:
Started tlsrpt-collectd.service - TLS Reporting Collector.
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,754 tlsrpt_collectd INFO tlsrpt
1481 : CONFIGURATION with 13 settings:
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,755 tlsrpt_collectd INFO tlsrpt
1483 : CONFIG from cfg option storage is sqlite:///tmp/tlsrpt-collectd.sqlite
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,755 tlsrpt_collectd INFO tlsrpt
1483 : CONFIG from cfg option socketname is
/var/spool/postfix/tlsrpt/tlsrpt-collectd.socket
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,755 tlsrpt_collectd INFO tlsrpt
1483 : CONFIG from cfg option socketuser is postfix
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,755 tlsrpt_collectd INFO tlsrpt
1483 : CONFIG from cfg option socketgroup is postfix
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,756 tlsrpt_collectd INFO tlsrpt
1483 : CONFIG from cfg option socketmode is 0220
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,756 tlsrpt_collectd INFO tlsrpt
1483 : CONFIG from def option sockettimeout is 5
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,756 tlsrpt_collectd INFO tlsrpt
1483 : CONFIG from def option max_uncommited_datagrams is 1000
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,756 tlsrpt_collectd INFO tlsrpt
1483 : CONFIG from def option retry_commit_datagram_count is 1000
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,757 tlsrpt_collectd INFO tlsrpt
1483 : CONFIG from def option pidfilename is
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,757 tlsrpt_collectd INFO tlsrpt
1483 : CONFIG from cfg option logfilename is /var/log/tlsrpt-collectd.log
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,757 tlsrpt_collectd INFO tlsrpt
1483 : CONFIG from cfg option log_level is debug
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,757 tlsrpt_collectd INFO tlsrpt
1483 : CONFIG from def option daily_rollover_script is
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,757 tlsrpt_collectd INFO tlsrpt
1483 : CONFIG from def option dump_path_for_invalid_datagram is
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,758 tlsrpt_collectd INFO tlsrpt
1534 : TLSRPT collectd starting
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,758 tlsrpt_collectd INFO tlsrpt
1549 : Listening on socket '/var/spool/postfix/tlsrpt/tlsrpt-collectd.socket'
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,758 tlsrpt_collectd INFO tlsrpt
1566 : Chmoding socket {'path':
'/var/spool/postfix/tlsrpt/tlsrpt-collectd.socket', 'user': 'postfix',
'group': 'postfix'}
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,760 tlsrpt_collectd INFO tlsrpt
1576 : Chmoding socket /var/spool/postfix/tlsrpt/tlsrpt-collectd.socket to
permissions 0220 (decimal 144)
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,841 tlsrpt_collectd DEBUG tlsrpt
376 : Try to open database '/tmp/tlsrpt-collectd.sqlite'
tlsrpt-collectd[32430]: 2025-10-02 21:09:47,861 tlsrpt_collectd INFO tlsrpt
476 : Database /tmp/tlsrpt-collectd.sqlite looks OK
Started tlsrpt-reportd.service - TLSRPT Report Daemon.
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,425 tlsrpt_reportd INFO tlsrpt 1481
: CONFIGURATION with 31 settings:
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,425 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from def option pidfilename is
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,425 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from cfg option logfilename is /var/log/tlsrpt-reportd.log
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from cfg option log_level is debug
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from def option debug_db is 0
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from def option keep_days is 10
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from def option debug_send_mail_dest is
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from def option debug_send_http_dest is
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from def option debug_send_file_dest is
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from cfg option dbname is /tmp/tlsrpt-reportd.sqlite
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from cfg option fetchers is python3 tlsrpt_fetcher.py --config_file
/usr/local/etc/tlsrpt-reportd.conf
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from def option compression_level is -1
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from cfg option http_script is curl --silent --header 'Content-Type:
application/tlsrpt+gzip' --data-binary @-
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from def option http_timeout is 10
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from cfg option sendmail_script is python3 /usr/local/bin/tlsrpt.py
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from def option sendmail_timeout is 10
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from cfg option spread_out_delivery is 3
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from cfg option interval_main_loop is 3600
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from def option max_collectd_timeout is 10
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from def option max_collectd_timediff is 10
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from def option max_retries_delivery is 5
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from def option min_wait_delivery is 300
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from def option max_wait_delivery is 1800
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from cfg option max_retries_domainlist is 2
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,428 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from cfg option min_wait_domainlist is 0
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,428 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from cfg option max_wait_domainlist is 1
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,428 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from cfg option max_retries_domaindetails is 2
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,428 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from cfg option min_wait_domaindetails is 0
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,428 tlsrpt_reportd INFO tlsrpt 1483
: CONFIG from cfg option max_wait_domaindetails is 1
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,428 tlsrpt_reportd INFO tlsrpt 1712
: TLSRPT reportd starting
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,428 tlsrpt_reportd DEBUG tlsrpt 376
: Try to open database '/tmp/tlsrpt-reportd.sqlite'
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,458 tlsrpt_reportd INFO tlsrpt 802
: Database /tmp/tlsrpt-reportd.sqlite looks OK
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,458 tlsrpt_reportd DEBUG tlsrpt
1418 : Enforcing wake up time from 2025-10-02 19:11:53.429132+00:00 to
2025-10-02 20:11:53.458359+00:00
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,458 tlsrpt_reportd DEBUG tlsrpt 894
: Check day
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,468 tlsrpt_reportd DEBUG tlsrpt
1415 : Changing wake up time from 2025-10-02 20:11:53.458359+00:00 to
2025-10-02 19:16:53.468630+00:00
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,469 tlsrpt_reportd DEBUG tlsrpt 916
: Collect domains
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,589 tlsrpt_reportd DEBUG tlsrpt
1029 : Fetch data
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,591 tlsrpt_reportd DEBUG tlsrpt
1218 : Create reports
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,591 tlsrpt_reportd DEBUG tlsrpt
1373 : Send out reports
tlsrpt-reportd[32764]: 2025-10-02 21:11:53,592 tlsrpt_reportd INFO tlsrpt 1440
: Sleeping for 299 seconds
When we send emails, we see the following messages in the log, which means
that the collectd is working:
postfix/smtp[8041]: TLSRPT: status=failure,
domain=mail-mtasts-rn-mult-ivp.measurement.email-security-scans.org,
receiving_mx=plaintext.measurement.email-security-scans.org[2a06:d1c0:dead:3::83],
failure_type=starttls_not_supported
postfix/smtp[8043]: TLSRPT: status=failure,
domain=mail-mtasts-rn-plain.measurement.email-security-scans.org,
receiving_mx=plaintext.measurement.email-security-scans.org[2a06:d1c0:dead:3::83],
failure_type=starttls_not_supported
postfix/smtp[8042]: TLSRPT: status=success,
domain=mail-mtasts-rn-mult-ivv.measurement.email-security-scans.org,
receiving_mx=tls-force.measurement.email-security-scans.org[195.191.197.89]
Via the command sqlite3 /tmp/tlsrpt-collectd.sqlite , sqlite> SELECT * FROM
finalresults; we see the results that are ready to be sent.
tlsrpt-reportd also does not give any errors.
Every 5 minutes is executed, and this can be seen in the log through these
logs:
tlsrpt-reportd[2123]: 2025-09-29 23:56:27,464 tlsrpt_reportd DEBUG tlsrpt 1418
: Enforcing wake up time from 2025-09-29 21:56:27.392484+00:00 to 2025-09-29
22:56:27.463796+00:00
tlsrpt-reportd[2123]: 2025-09-29 23:56:27,466 tlsrpt_reportd DEBUG tlsrpt 894
: Check day
tlsrpt-reportd[2123]: 2025-09-29 23:56:27,466 tlsrpt_reportd DEBUG tlsrpt 1415
: Changing wake up time from 2025-09-29 22:56:27.463796+00:00 to 2025-09-29
22:01:27.466605+00:00
tlsrpt-reportd[2123]: 2025-09-29 23:56:27,468 tlsrpt_reportd DEBUG tlsrpt 916
: Collect domains
tlsrpt-reportd[2123]: 2025-09-29 23:56:27,469 tlsrpt_reportd DEBUG tlsrpt 1029
: Fetch data
tlsrpt-reportd[2123]: 2025-09-29 23:56:27,470 tlsrpt_reportd DEBUG tlsrpt 1218
: Create reports
tlsrpt-reportd[2123]: 2025-09-29 23:56:27,470 tlsrpt_reportd DEBUG tlsrpt 1373
: Send out reports
tlsrpt-reportd[2123]: 2025-09-29 23:56:27,470 tlsrpt_reportd INFO tlsrpt 1440
: Sleeping for 299 seconds
Unfortunately, no emails are being sent.
What am I overlooking or have I forgotten to configure something?
Kind regards,
Johan