After installing the most recent courier on a Debian Sarge
clients trying STARTTLS were rejected with with this message:

courieresmtpd: courieresmtpd: STARTTLS failed: Unexpected SSL connection
shutdown.

Poking around in the source did not reveal anything, and with
the protocol set to TLS1 the daemon even freaked out completely
and instantly dropped the connection with a 5xx:

courieresmtpd: courieresmtpd: STARTTLS failed: couriertls: accept:
error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number 

Finally the problem was solved by downgrading to SSLv2 on the
server and now works this way.

How to debug the issue with SSLv3 (and maybe TLS1) ?

Roland

# ldd couriertls
        libdl.so.2 => /lib/libdl.so.2 (0x4001e000)
        libssl.so.0.9.7 => /usr/lib/i686/cmov/libssl.so.0.9.7 (0x40021000)
        libcrypto.so.0.9.7 => /usr/lib/i686/cmov/libcrypto.so.0.9.7
(0x40050000)
        libc.so.6 => /lib/libc.so.6 (0x40142000)
        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)



-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to