On Wed, 08 Apr 2015 19:55:52 -0700
Seth wrote:

> > Also, whether this hangs
> >
> > /usr/bin/openssl s_client -connect mx5.demon.co.uk:25 -starttls smtp
> > -CAfile /etc/ssl/cert.pem  
> 
> I ran the command above on an OpenBSD 5.6-release host and it stopped  
> responding at the "250 8BITMIME" line at the bottom.

Hmm, now I am puzzled as that is what should happen. You don't
have /usr/bin/openssl and /usr/sbin/openssl installed do you? I guess
you ran the same as above but /usr/sbin on 5.6 as it has moved
to /usr/bin/ on 5.7

Also have you applied the ssl patches from
www.openbsd.org/errata56.html or by using mtiers openup tool (no
building). Particularly 005 that disables sslv3?

On my 5.6 box it stops at CONNECTED and the traffic shows client hello
like for OpenSMTPD (well actually a certificate receipt can be seen in
the encrypted traffic but not much more).

-debug shows it ending with <SPACES/NULLS>

Thanks

-- 
You received this mail because you are subscribed to [email protected]
To unsubscribe, send a mail to: [email protected]

Reply via email to