Hey Elrippo,
On 14.04.2015 12:23, Elrippo wrote:
> Create a new self signed certificate, then it will work again
Thanks soo much! It works, looks good! I will do further testing,
but if you don't hear back from me then its all fine.
On a side note, was this somehow visible from the logs or somewhere?
I would have never found this without you...
Thanks a lot again, and all the best,
Mario
> Am 14. April 2015 11:08:51 MESZ, schrieb Mario Emmenlauer
> <[email protected]>:
>
>
> Hello,
>
> I've recently upgraded to Ubuntu 14.04, and now exim does not
> accept emails from hotmail, gmail and some other services anymore.
> The error I get is typically something like:
> ... TLS error on connection from bay004-omc2s25.hotmail.com
> <http://bay004-omc2s25.hotmail.com> [65.54.190.100 <http://65.54.190.100>]
> (gnutls_handshake): Could not negotiate a supported cipher suite.
>
> With lots of searching I found various leads(*) that indicate that I
> must set tls_require_ciphers to allow TLS v1.0 and v1.1. However no
> success with all my tries so far :-( I tried to set
> tls_require_ciphers =
> NORMAL:+VERS-TLS1.2:+VERS-TLS1.1:+VERS-TLS1.0:%COMPAT
> in conf.d/main/03_exim4-config_tlsoptions but the error persits. I've
> tried sslscan with and without my tls_require_ciphers, but it shows
> no difference? I'm a bit new to exim, can you please advise explicitly
> what to do
> (attached my merged config) and/or how to even test this?
>
> Thanks a lot,
>
> Mario
>
>
>
> The best so far was:
> (*) https://lists.exim.org/lurker/message/20141103.181337.b32d29e3.de.html
>
>
>
>
>
> --
--
Mario Emmenlauer BioDataAnalysis Mobil: +49-(0)151-68108489
Balanstrasse 43 mailto: mario.emmenlauer * unibas.ch
D-81669 München http://www.biodataanalysis.de/
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
