On Sat, Jan 19, 2019 at 08:12:29PM +0100, Johannes Krottmayer wrote:
> Hello,
> 
> I have a question or a problem of understanding.
> 
> When I try to connect through the the command line utility openssl to
> port smtp or submission I get this output:
> 
> $ openssl s_client -connect odin42:25

openssl s_client -connect host:port -starttls smtp

I did the same thing and forgot the starttls bit. The whole pipelining
thing doesn't really help to figure it out though.

> CONNECTED(00000003)
> 139782539474752:error:1408F10B:SSL routines:ssl3_get_record:wrong
> version number:ssl/record/ssl3_record.c:252:
> ---
> no peer certificate available
> ---
> No client certificate CA names sent
> ---
> SSL handshake has read 5 bytes and written 176 bytes
> Verification: OK
> ---
> New, (NONE), Cipher is (NONE)
> Secure Renegotiation IS NOT supported
> Compression: NONE
> Expansion: NONE
> No ALPN negotiated
> SSL-Session:
>     Protocol  : TLSv1.2
>     Cipher    : 0000
>     Session-ID:
>     Session-ID-ctx:
>     Master-Key:
>     PSK identity: None
>     PSK identity hint: None
>     SRP username: None
>     Start Time: 1547924099
>     Timeout   : 7200 (sec)
>     Verify return code: 0 (ok)
>     Extended master secret: no
> ---
> $
> 
> And in /var/log/maillog on the server these messages appears:
> 
> Jan 19 19:41:07 odin42 smtpd[25442]: 430c551fc99f310d smtp connected
> address=194.96.2.67 host=194-96-2-67.adsl.highway.telekom.at
> Jan 19 19:41:07 odin42 smtpd[25442]: 430c551fc99f310d smtp bad-input
> address=194.96.2.67 host=194-96-2-67.adsl.highway.telekom.at result="500
> 5.5.1 Invalid command: Pipelining not supported"
> Jan 19 19:41:07 odin42 smtpd[25442]: 430c551fc99f310d smtp disconnected
> address=194.96.2.67 host=194-96-2-67.adsl.highway.telekom.at reason=quit
> 
> When I connect to smtps port, everything works fine.
> 
> Here is my listen setup of OpenSMTPD:
> 
> # listen setup
> listen on lo0
> listen on lo0 port 10028 tag DKIM
> listen on egress tls pki mx1.krottmayer.com.pki auth-optional
> listen on egress smtps pki mx1.krottmayer.com.pki auth
> listen on egress port submission tls pki mx1.krottmayer.com.pki auth
> 
> Could somebody check my configuration, please?
> 
> Thanks in advance!
> 
> -- 
> Best regards,
> 
> Johannes
> 
> -- 
> You received this mail because you are subscribed to misc@opensmtpd.org
> To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
> 

-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org

Reply via email to