Setting Up an Internal Email Server (Docker) for Application Home Lab Use
Microsoft has announced that it will retire basic auth SMTP, which means that sending emails from applications in a home lab environment will no longer be possible using this method. A solution to this problem was to set up an internal email server using Docker. This article will provide a detailed guide on how to achieve this.
Why Use an Internal Email Server?
An internal email server can provide several benefits, including:
- Allowing applications in a home lab to send emails using an internal server
- Providing better control over email sending and receiving
- Improving security by keeping emails within the home lab environment
Requirements
To set up an internal email server using Docker, you will need:
- A Docker host (e.g., a Raspberry Pi, a Kubernetes cluster, or a virtual machine)
- A domain name (e.g., example.com) and a DNS provider (e.g., Cloudflare) to manage DNS records
- A SSL/TLS certificate for the domain name (e.g., Let's Encrypt)
Setting Up the Email Server
To set up the email server, you can use a pre-built Docker image, such as docker-mailserver or docker-mailserver/docker-mailserver. In this example, we will use docker-mailserver.
Step 1: Configure DNS Records
Create a new subdomain for the domain name (e.g., mail.example.com) and configure the DNS records as follows:
- MX record: mail.example.com
- TXT record: v=spf1 mx a ip4:
-all - DKIM record (optional):
._domainkey.mail.example.com
Step 2: Generate SSL/TLS Certificate
Generate an SSL/TLS certificate for the domain name using Let's Encrypt or another SSL/TLS certificate provider.
Step 3: Run the Docker Image
Run the docker-mailserver Docker image using the following command:
docker run -d --name mailserver \
-v mailserver\_data:/var/mail \
-v mailserver\_config:/etc/mail \
-v mailserver\_certs:/etc/ssl/certs \
-p 25:25 \
-p 465:465 \
-p 587:587 \
-p 993:993 \
-e TZ= \
-e ROUNDCUBE\_DB\_TYPE= \
-e ROUNDCUBE\_DB\_HOST= \
-e ROUNDCUBE\_DB\_NAME= \
-e ROUNDCUBE\_DB\_USER= \
-e ROUNDCUBE\_DB\_PASSWORD= \
-e POSTMASTER\_EMAIL= \
-e MAIL\_DOMAIN= \
-e MAIL\_TLS=yes \
-e MAIL\_TLS\_STARTTLS=yes \
-e MAIL\_TLS\_FORCE\_STARTTLS=yes \
-e MAIL\_TLS\_CA\_FILE=/etc/ssl/certs/ca-certificates.crt \
-e MAIL\_TLS\_CERT\_FILE=/etc/ssl/certs/ \
-e MAIL\_TLS\_KEY\_FILE=/etc/ssl/private/ \
-e MAIL\_PROTOCOL=smtps \
-e MAIL\_ALLOW\_PLAIN=no \
-e MAIL\_ALLOW\_LOGIN=yes \
-e MAIL\_ALLOW\_CRAM\_MD5=no \
-e MAIL\_ALLOW\_AUTH\_PLAIN=no \
-e MAIL\_ALLOW\_AUTH\_LOGIN=yes \
-e MAIL\_ALLOW\_AUTH\_CRAM\_MD5=no \
-e MAIL\_ALLOW\_AUTH\_EXTERNAL=no \
-e MAIL\_ALLOW\_AUTH\_ANONYMOUS=no \
-e MAIL\_AUTH\_REQUIRED=yes \
-e MAIL\_AUTH\_REQUIRED\_TLS=yes \
-e MAIL\_RELAY\_ALLOWED= \
-e MAIL\_RELAY\_ALLOWED\_NETWORKS= \
-e MAIL\_RELAY\_ALLOWED\_HOSTS= \
-e MAIL\_RELAY\_ALLOWED\_CLIENTS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_STARTTLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS= \
-e MAIL\_RELAY\_ALLOWED\_AUTH\_CLIENTS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS\_REQUIRE\_AUTH\_TLS\_STARTTLS