My certificate shows the FQDN so that shouldn't be the problem. What else could it be?
On 10/7/05, Aditya Nag <[EMAIL PROTECTED]> wrote: > CONNECTED(00000003) > depth=0 /C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > verify error:num=18:self signed certificate > verify return:1 > depth=0 /C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > verify return:1 > --- > Certificate chain > 0 s:/C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > i:/C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > -----BEGIN CERTIFICATE----- > MIIDpDCCAw2gAwIBAgIBADANBgkqhkiG9w0BAQQFADCBmTELMAkGA1UEBhMCSU4x > EjAQBgNVBAgTCVJhamFzdGhhbjEQMA4GA1UEBxMHSm9kaHB1cjEgMB4GA1UEChMX > TmF0aW9uYWwgTGF3IFVuaXZlcnNpdHkxHjAcBgNVBAMTFW1haWwubmx1am9kaHB1 > ci5hYy5pbjEiMCAGCSqGSIb3DQEJARYTYWRpdHlhbmFnQGdtYWlsLmNvbTAeFw0w > NTEwMDMwMzE1MDdaFw0wNjEwMDMwMzE1MDdaMIGZMQswCQYDVQQGEwJJTjESMBAG > A1UECBMJUmFqYXN0aGFuMRAwDgYDVQQHEwdKb2RocHVyMSAwHgYDVQQKExdOYXRp > b25hbCBMYXcgVW5pdmVyc2l0eTEeMBwGA1UEAxMVbWFpbC5ubHVqb2RocHVyLmFj > LmluMSIwIAYJKoZIhvcNAQkBFhNhZGl0eWFuYWdAZ21haWwuY29tMIGfMA0GCSqG > SIb3DQEBAQUAA4GNADCBiQKBgQC7O4o1AXp4uOWxAAa7pr6nn50h1GFW2sxUlHu1 > ZvsWQUKIqNidcUz7xCcFzw8S013j+zraHU24Zz0vLDkhxz4ELoAki1m2RLr5WMwQ > vbQ/Ri07YpTKGcA+mTswlRr4qrZ6iHKmOoIjzR8x5h9jGx3i19+BgOuh8aSZPr1E > uOfk+QIDAQABo4H5MIH2MB0GA1UdDgQWBBS003ZZndHzcSyuxNThkDlsGve65zCB > xgYDVR0jBIG+MIG7gBS003ZZndHzcSyuxNThkDlsGve656GBn6SBnDCBmTELMAkG > A1UEBhMCSU4xEjAQBgNVBAgTCVJhamFzdGhhbjEQMA4GA1UEBxMHSm9kaHB1cjEg > MB4GA1UEChMXTmF0aW9uYWwgTGF3IFVuaXZlcnNpdHkxHjAcBgNVBAMTFW1haWwu > bmx1am9kaHB1ci5hYy5pbjEiMCAGCSqGSIb3DQEJARYTYWRpdHlhbmFnQGdtYWls > LmNvbYIBADAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBAUAA4GBABGASUJjpzwp > vZgg3zllEKALd6o09pMePh4uSQ7X+cpbBie3BKANadwaQ32D20WA1aLprf1iLziG > zFvvxlNPDKkjMQuNI/qlc7HF8/Vs/Nlwy3cyIRh3cs+sLgVQsQxtzGgS8sCyiPiP > l550YaTCM9l4+bM2HQ/fbo+jGSsQOc04 > -----END CERTIFICATE----- > --- > Server certificate > subject=/C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > issuer=/C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > --- > No client certificate CA names sent > --- > SSL handshake has read 1576 bytes and written 350 bytes > --- > New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA > Server public key is 1024 bit > SSL-Session: > Protocol : TLSv1 > Cipher : DHE-RSA-AES256-SHA > Session-ID: > 020E7E7A0DEA3BBAFCC482DD1A7E45EA9576DDFFEB1840236ED30913F55C86DD > Session-ID-ctx: > Master-Key: > 0AB21E3FDC14E123A37329F6A601EB663461601BF57322609577FA58741B6D5B3DC69267074C7E919D2480A8F424D0A6 > Key-Arg : None > Krb5 Principal: None > Start Time: 1128687326 > Timeout : 300 (sec) > Verify return code: 18 (self signed certificate) > --- > 220 Welcome to Qmail Toaster Ver. 1.2 smtp Server ESMTP > > _____________________________________ > > That's what I get.. > Regards, > Aditya > > > On 10/7/05, Erik Espinoza <[EMAIL PROTECTED]> wrote: > > Type the following command at the prompt and paste back the response: > > > > $ openssl s_client -starttls smtp -showcerts -connect localhost:25 > > > > Thanks, > > Erik > > > > On 10/7/05, Aditya Nag <[EMAIL PROTECTED]> wrote: > > > my /var/qmail/control/me file contins one line, my servers FQDN. > > > should there be something else here? > > > > > > Aditya > > > > > > > > > On 10/7/05, Alvin Engler <[EMAIL PROTECTED]> wrote: > > > > 1. /var/qmail/control/me should be set to the cname of your secure > > > > certificate > > > > 2. in order to get depreciated SMTP + SSL (port 465) working I had to > > > > set up a custom process in /var/qmail/supervise/smtp-ssl. My "run" file > > > > is pasted below for reference. > > > > > > > > YMMV, > > > > Alvin > > > > > > > > #!/bin/sh > > > > QMAILDUID=`id -u vpopmail` > > > > NOFILESGID=`id -g vpopmail` > > > > MAXSMTPD=`cat /var/qmail/control/concurrencyincoming` > > > > BLACKLIST=`cat /var/qmail/control/blacklists` > > > > SMTPD="/var/qmail/bin/qmail-smtpd" > > > > TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb" > > > > RBLSMTPD="/usr/bin/rblsmtpd" > > > > HOSTNAME=`hostname` > > > > VCHKPW="/home/vpopmail/bin/vchkpw" > > > > SMTPS=1 > > > > export SMTPS > > > > > > > > exec /usr/bin/softlimit -m 12000000 \ > > > > /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c > > > > "$MAXSMTPD" \ > > > > -u "$QMAILDUID" -g "$NOFILESGID" 0 465 \ > > > > $RBLSMTPD $BLACKLIST $SMTPD $VCHKPW /bin/true 2>&1 > > > > > > > > Aditya Nag wrote: > > > > > > > > >Hi, > > > > >So now everything is working, and my users are praising the speed of > > > > >the new system.. Life is good. > > > > > > > > > >I have tested all the features and POP3, IMAP, POP3-SSL, IMAP-SSL are > > > > >all working. But SMPT + TLS or SMTP + SSL does not work. Is there some > > > > >way to get it working? I think Qmail toaster supports it, so I belive > > > > >it's something wrong on my system. > > > > > > > > > >The error message I get with both SMTP-SSL and SMTP-TLS is "Unable to > > > > >connect to the specified SMTP server" > > > > > > > > > >Normal SMTP works great. > > > > > > > > > >I did a tail -f /var/log/qmail/smtpd/current and tried to log in with > > > > >SMPT-TLS and SMTP-SSL but it didn't show anything. > > > > > > > > > >I also tried switching off the firewall completely and then trying. No > > > > >luck. > > > > > > > > > >what could i do to get this to work? > > > > > > > > > >Regards, > > > > >Aditya > > > > >-- > > > > >www.adityanag.org > > > > > > > > > >--------------------------------------------------------------------- > > > > >To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > >For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > -- > > > www.adityanag.org > > > > > > --------------------------------------------------------------------- > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > -- > www.adityanag.org > -- www.adityanag.org --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
