Our corporate SMTP server requires TLS1.2. I expected that all that would be required is to tick the TLS box for mail in Lucee Administrator. It didn’t work. As an interim solution I used the local Windows SMTP Service as a relay. On revisiting this, AI suggested adding the following Java Options to the Tomcat settings.
The problem is currently Lucee announces all the versions it supports, given it’s 2025, i think we should consider not announcing by default versions less than 1.2, and perhaps exposing via the smtp settings the protocol
Yes, adding those Java/Tomcat options is the right approach when your SMTP service provider requires TLS 1.2, since Lucee’s checkbox alone doesn’t always enforce the protocol version. If you’re looking to simplify this setup, switching to a dedicated SMTP service provider like DigitalAka™ can handle TLS negotiation automatically without manual JVM flags. That said, the fix you’ve applied is technically sound and a commonly recommended workaround until Lucee exposes protocol selection natively in its mail settings.
I have updated Lucee 6.2, 7.0 and 7.1 to respect the jvm supported mail protocols (which skips the older deprecated ones) , as long as you are using a recent jvm, it will automatically default now to tls 1.2 and 1.3