On Tue, Nov 26, 2013 at 10:36 AM, Ben Noordhuis <[email protected]> wrote:

> On Tue, Nov 26, 2013 at 3:59 PM, Matt <[email protected]> wrote:
> > From: https://tools.ietf.org/html/rfc5246#page-29
> >
> > We need to be able to detect this in Haraka because Exim does some
> horrible
> > nastiness with downgrading TLS and restarting the SMTP session in
> plaintext.
> >
> > I can't see anything in the TLS or Socket API that would catch this right
> > now. Is it possible?
>
> No.  OpenSSL moves the TLS connection into shutdown mode when a
> CLOSE_NOTIFY alert arrives.  As far as node.js is concerned, that
> means the connection is terminated / terminating.
>

But as far as I can tell, I don't get a 'close' event on the plaintext
socket either. Is it because I'm using a custom shim rather than the core
tls.connect({socket:...}) method?

For context of why this is occurring:
http://www.exim.org/exim-html-current/doc/html/spec_html/ch-encrypted_smtp_connections_using_tlsssl.html#SECTmulmessam(yeah
they really do that - totally screwy!).

(also if anyone has any hints on debugging/replicating this without waiting
for an exim connection to come in, perhaps via some openssl command line,
I'd love to know)

Matt.

-- 
-- 
Job Board: http://jobs.nodejs.org/
Posting guidelines: 
https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
You received this message because you are subscribed to the Google
Groups "nodejs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/nodejs?hl=en?hl=en

--- 
You received this message because you are subscribed to the Google Groups 
"nodejs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to