TLSRPT

Download

tlsrpt@list.sys4.de

October 2025

1 discussions

TLS reporter
by Johan Hop | HOP ICT Consultancy 27 Oct '25

27 Oct '25

Good afternoon, We are testing the TLS reporter test environment. We downloaded and installed the following tool from GitHub: https://github.com/sys4/tlsrpt-reporter.git We have created two services: tlsrpt-collectd and tlsrpt-reportd. Both services are started and have an active and running status. These are the logs: Started tlsrpt-collectd.service - TLS Reporting Collector. tlsrpt-collectd[32430]: 2025-10-02 21:09:47,754 tlsrpt_collectd INFO tlsrpt 1481 : CONFIGURATION with 13 settings: tlsrpt-collectd[32430]: 2025-10-02 21:09:47,755 tlsrpt_collectd INFO tlsrpt 1483 : CONFIG from cfg option storage is sqlite:///tmp/tlsrpt-collectd.sqlite tlsrpt-collectd[32430]: 2025-10-02 21:09:47,755 tlsrpt_collectd INFO tlsrpt 1483 : CONFIG from cfg option socketname is /var/spool/postfix/tlsrpt/tlsrpt-collectd.socket tlsrpt-collectd[32430]: 2025-10-02 21:09:47,755 tlsrpt_collectd INFO tlsrpt 1483 : CONFIG from cfg option socketuser is postfix tlsrpt-collectd[32430]: 2025-10-02 21:09:47,755 tlsrpt_collectd INFO tlsrpt 1483 : CONFIG from cfg option socketgroup is postfix tlsrpt-collectd[32430]: 2025-10-02 21:09:47,756 tlsrpt_collectd INFO tlsrpt 1483 : CONFIG from cfg option socketmode is 0220 tlsrpt-collectd[32430]: 2025-10-02 21:09:47,756 tlsrpt_collectd INFO tlsrpt 1483 : CONFIG from def option sockettimeout is 5 tlsrpt-collectd[32430]: 2025-10-02 21:09:47,756 tlsrpt_collectd INFO tlsrpt 1483 : CONFIG from def option max_uncommited_datagrams is 1000 tlsrpt-collectd[32430]: 2025-10-02 21:09:47,756 tlsrpt_collectd INFO tlsrpt 1483 : CONFIG from def option retry_commit_datagram_count is 1000 tlsrpt-collectd[32430]: 2025-10-02 21:09:47,757 tlsrpt_collectd INFO tlsrpt 1483 : CONFIG from def option pidfilename is tlsrpt-collectd[32430]: 2025-10-02 21:09:47,757 tlsrpt_collectd INFO tlsrpt 1483 : CONFIG from cfg option logfilename is /var/log/tlsrpt-collectd.log tlsrpt-collectd[32430]: 2025-10-02 21:09:47,757 tlsrpt_collectd INFO tlsrpt 1483 : CONFIG from cfg option log_level is debug tlsrpt-collectd[32430]: 2025-10-02 21:09:47,757 tlsrpt_collectd INFO tlsrpt 1483 : CONFIG from def option daily_rollover_script is tlsrpt-collectd[32430]: 2025-10-02 21:09:47,757 tlsrpt_collectd INFO tlsrpt 1483 : CONFIG from def option dump_path_for_invalid_datagram is tlsrpt-collectd[32430]: 2025-10-02 21:09:47,758 tlsrpt_collectd INFO tlsrpt 1534 : TLSRPT collectd starting tlsrpt-collectd[32430]: 2025-10-02 21:09:47,758 tlsrpt_collectd INFO tlsrpt 1549 : Listening on socket '/var/spool/postfix/tlsrpt/tlsrpt-collectd.socket' tlsrpt-collectd[32430]: 2025-10-02 21:09:47,758 tlsrpt_collectd INFO tlsrpt 1566 : Chmoding socket {'path': '/var/spool/postfix/tlsrpt/tlsrpt-collectd.socket', 'user': 'postfix', 'group': 'postfix'} tlsrpt-collectd[32430]: 2025-10-02 21:09:47,760 tlsrpt_collectd INFO tlsrpt 1576 : Chmoding socket /var/spool/postfix/tlsrpt/tlsrpt-collectd.socket to permissions 0220 (decimal 144) tlsrpt-collectd[32430]: 2025-10-02 21:09:47,841 tlsrpt_collectd DEBUG tlsrpt 376 : Try to open database '/tmp/tlsrpt-collectd.sqlite' tlsrpt-collectd[32430]: 2025-10-02 21:09:47,861 tlsrpt_collectd INFO tlsrpt 476 : Database /tmp/tlsrpt-collectd.sqlite looks OK Started tlsrpt-reportd.service - TLSRPT Report Daemon. tlsrpt-reportd[32764]: 2025-10-02 21:11:53,425 tlsrpt_reportd INFO tlsrpt 1481 : CONFIGURATION with 31 settings: tlsrpt-reportd[32764]: 2025-10-02 21:11:53,425 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from def option pidfilename is tlsrpt-reportd[32764]: 2025-10-02 21:11:53,425 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from cfg option logfilename is /var/log/tlsrpt-reportd.log tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from cfg option log_level is debug tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from def option debug_db is 0 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from def option keep_days is 10 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from def option debug_send_mail_dest is tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from def option debug_send_http_dest is tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from def option debug_send_file_dest is tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from cfg option dbname is /tmp/tlsrpt-reportd.sqlite tlsrpt-reportd[32764]: 2025-10-02 21:11:53,426 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from cfg option fetchers is python3 tlsrpt_fetcher.py --config_file /usr/local/etc/tlsrpt-reportd.conf tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from def option compression_level is -1 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from cfg option http_script is curl --silent --header 'Content-Type: application/tlsrpt+gzip' --data-binary @- tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from def option http_timeout is 10 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from cfg option sendmail_script is python3 /usr/local/bin/tlsrpt.py tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from def option sendmail_timeout is 10 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from cfg option spread_out_delivery is 3 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from cfg option interval_main_loop is 3600 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from def option max_collectd_timeout is 10 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from def option max_collectd_timediff is 10 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from def option max_retries_delivery is 5 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from def option min_wait_delivery is 300 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from def option max_wait_delivery is 1800 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,427 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from cfg option max_retries_domainlist is 2 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,428 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from cfg option min_wait_domainlist is 0 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,428 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from cfg option max_wait_domainlist is 1 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,428 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from cfg option max_retries_domaindetails is 2 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,428 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from cfg option min_wait_domaindetails is 0 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,428 tlsrpt_reportd INFO tlsrpt 1483 : CONFIG from cfg option max_wait_domaindetails is 1 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,428 tlsrpt_reportd INFO tlsrpt 1712 : TLSRPT reportd starting tlsrpt-reportd[32764]: 2025-10-02 21:11:53,428 tlsrpt_reportd DEBUG tlsrpt 376 : Try to open database '/tmp/tlsrpt-reportd.sqlite' tlsrpt-reportd[32764]: 2025-10-02 21:11:53,458 tlsrpt_reportd INFO tlsrpt 802 : Database /tmp/tlsrpt-reportd.sqlite looks OK tlsrpt-reportd[32764]: 2025-10-02 21:11:53,458 tlsrpt_reportd DEBUG tlsrpt 1418 : Enforcing wake up time from 2025-10-02 19:11:53.429132+00:00 to 2025-10-02 20:11:53.458359+00:00 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,458 tlsrpt_reportd DEBUG tlsrpt 894 : Check day tlsrpt-reportd[32764]: 2025-10-02 21:11:53,468 tlsrpt_reportd DEBUG tlsrpt 1415 : Changing wake up time from 2025-10-02 20:11:53.458359+00:00 to 2025-10-02 19:16:53.468630+00:00 tlsrpt-reportd[32764]: 2025-10-02 21:11:53,469 tlsrpt_reportd DEBUG tlsrpt 916 : Collect domains tlsrpt-reportd[32764]: 2025-10-02 21:11:53,589 tlsrpt_reportd DEBUG tlsrpt 1029 : Fetch data tlsrpt-reportd[32764]: 2025-10-02 21:11:53,591 tlsrpt_reportd DEBUG tlsrpt 1218 : Create reports tlsrpt-reportd[32764]: 2025-10-02 21:11:53,591 tlsrpt_reportd DEBUG tlsrpt 1373 : Send out reports tlsrpt-reportd[32764]: 2025-10-02 21:11:53,592 tlsrpt_reportd INFO tlsrpt 1440 : Sleeping for 299 seconds When we send emails, we see the following messages in the log, which means that the collectd is working: postfix/smtp[8041]: TLSRPT: status=failure, domain=mail-mtasts-rn-mult-ivp.measurement.email-security-scans.org, receiving_mx=plaintext.measurement.email-security-scans.org[2a06:d1c0:dead:3::83], failure_type=starttls_not_supported postfix/smtp[8043]: TLSRPT: status=failure, domain=mail-mtasts-rn-plain.measurement.email-security-scans.org, receiving_mx=plaintext.measurement.email-security-scans.org[2a06:d1c0:dead:3::83], failure_type=starttls_not_supported postfix/smtp[8042]: TLSRPT: status=success, domain=mail-mtasts-rn-mult-ivv.measurement.email-security-scans.org, receiving_mx=tls-force.measurement.email-security-scans.org[195.191.197.89] Via the command sqlite3 /tmp/tlsrpt-collectd.sqlite , sqlite> SELECT * FROM finalresults; we see the results that are ready to be sent. tlsrpt-reportd also does not give any errors. Every 5 minutes is executed, and this can be seen in the log through these logs: tlsrpt-reportd[2123]: 2025-09-29 23:56:27,464 tlsrpt_reportd DEBUG tlsrpt 1418 : Enforcing wake up time from 2025-09-29 21:56:27.392484+00:00 to 2025-09-29 22:56:27.463796+00:00 tlsrpt-reportd[2123]: 2025-09-29 23:56:27,466 tlsrpt_reportd DEBUG tlsrpt 894 : Check day tlsrpt-reportd[2123]: 2025-09-29 23:56:27,466 tlsrpt_reportd DEBUG tlsrpt 1415 : Changing wake up time from 2025-09-29 22:56:27.463796+00:00 to 2025-09-29 22:01:27.466605+00:00 tlsrpt-reportd[2123]: 2025-09-29 23:56:27,468 tlsrpt_reportd DEBUG tlsrpt 916 : Collect domains tlsrpt-reportd[2123]: 2025-09-29 23:56:27,469 tlsrpt_reportd DEBUG tlsrpt 1029 : Fetch data tlsrpt-reportd[2123]: 2025-09-29 23:56:27,470 tlsrpt_reportd DEBUG tlsrpt 1218 : Create reports tlsrpt-reportd[2123]: 2025-09-29 23:56:27,470 tlsrpt_reportd DEBUG tlsrpt 1373 : Send out reports tlsrpt-reportd[2123]: 2025-09-29 23:56:27,470 tlsrpt_reportd INFO tlsrpt 1440 : Sleeping for 299 seconds Unfortunately, no emails are being sent. What am I overlooking or have I forgotten to configure something? Kind regards, Johan

2 1