With the testing by both telnet and openssl s_client I can see the TLS as the 
available option but I see too the "None" cipher.

I am suspecting this though confusing.

I will first read more on the testing with these tools and understanding the 
meaning of the logging reply for them.  I also see the idea from Wietse to 
look in to other location for logs reply.  I did that once or more alredy but 
will see to that again right now.

telnet 127.0.0.1 25
    Trying 127.0.0.1...
    Connected to 127.0.0.1.
    Escape character is '^]'.
    220 http://mx.srchdomain.com ESMTP . No UCE permitted.
    EHLO http://test.com
    http://250-mx.srchdomain.com
    250-PIPELINING
    250-SIZE 10240000
    250-VRFY
    250-ETRN
    250-STARTTLS
    250-XCLIENT NAME ADDR PROTO HELO REVERSE_NAME PORT LOGIN
    250-ENHANCEDSTATUSCODES
    250-8BITMIME
    250 DSN

telnet 127.0.0.1 10026
    Trying 127.0.0.1...
    Connected to 127.0.0.1.
    Escape character is '^]'.
    220 http://srchsvr.srchdomain.com ESMTP . No UCE permitted.
    EHLO http://test.com
    http://250-srchsvr.srchdomain.com
    250-PIPELINING
    250-SIZE 10240000
    250-VRFY
    250-ETRN
    250-STARTTLS
    250-ENHANCEDSTATUSCODES
    250-8BITMIME
    250 DSN

openssl s_client -crlf -connect 127.0.0.1:25 -starttls smtp  -tls1_2 -CApath 
/etc/ssl/certs
    CONNECTED(00000003)
    139892197459600:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version 
number:s3_pkt.c:361:
    ---
    no peer certificate available
    ---
    No client certificate CA names sent
    ---
    SSL handshake has read 312 bytes and written 7 bytes
    ---
    New, (NONE), Cipher is (NONE)
    Secure Renegotiation IS NOT supported
    Compression: NONE
    Expansion: NONE
    No ALPN negotiated
    SSL-Session:
        Protocol  : TLSv1.2
        Cipher    : 0000
        Session-ID:
        Session-ID-ctx:
        Master-Key:
        Key-Arg   : None
        PSK identity: None
        PSK identity hint: None
        SRP username: None
        Start Time: 1422561244
        Timeout   : 7200 (sec)
        Verify return code: 0 (ok)
    ---

openssl s_client -crlf -connect 127.0.0.1:10026 -starttls smtp  -tls1_2 
-CApath /etc/ssl/certs
    CONNECTED(00000003)
    140014293526160:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version 
number:s3_pkt.c:361:
    ---
    no peer certificate available
    ---
    No client certificate CA names sent
    ---
    SSL handshake has read 246 bytes and written 7 bytes
    ---
    New, (NONE), Cipher is (NONE)
    Secure Renegotiation IS NOT supported
    Compression: NONE
    Expansion: NONE
    No ALPN negotiated
    SSL-Session:
        Protocol  : TLSv1.2
        Cipher    : 0000
        Session-ID:
        Session-ID-ctx:
        Master-Key:
        Key-Arg   : None
        PSK identity: None
        PSK identity hint: None
        SRP username: None
        Start Time: 1422561276
        Timeout   : 7200 (sec)
        Verify return code: 0 (ok)
    ---

And then I will look at my 'postconf -n' myself first too.  Better to do it 
myself first.  I must find this since I did it to myself.

When I can not then I will have to be begging.  Bleh again!

*S*

Reply via email to