Have you tried connecting to the TLS or SSL setup with a different client? Some clients will not allow you to connect iwthout a signed cert.
erik On 10/7/05, Aditya Nag <[EMAIL PROTECTED]> wrote: > My certificate shows the FQDN so that shouldn't be the problem. What > else could it be? > > > On 10/7/05, Aditya Nag <[EMAIL PROTECTED]> wrote: > > CONNECTED(00000003) > > depth=0 /C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > > verify error:num=18:self signed certificate > > verify return:1 > > depth=0 /C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > > verify return:1 > > --- > > Certificate chain > > 0 s:/C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > > i:/C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > > -----BEGIN CERTIFICATE----- > > MIIDpDCCAw2gAwIBAgIBADANBgkqhkiG9w0BAQQFADCBmTELMAkGA1UEBhMCSU4x > > EjAQBgNVBAgTCVJhamFzdGhhbjEQMA4GA1UEBxMHSm9kaHB1cjEgMB4GA1UEChMX > > TmF0aW9uYWwgTGF3IFVuaXZlcnNpdHkxHjAcBgNVBAMTFW1haWwubmx1am9kaHB1 > > ci5hYy5pbjEiMCAGCSqGSIb3DQEJARYTYWRpdHlhbmFnQGdtYWlsLmNvbTAeFw0w > > NTEwMDMwMzE1MDdaFw0wNjEwMDMwMzE1MDdaMIGZMQswCQYDVQQGEwJJTjESMBAG > > A1UECBMJUmFqYXN0aGFuMRAwDgYDVQQHEwdKb2RocHVyMSAwHgYDVQQKExdOYXRp > > b25hbCBMYXcgVW5pdmVyc2l0eTEeMBwGA1UEAxMVbWFpbC5ubHVqb2RocHVyLmFj > > LmluMSIwIAYJKoZIhvcNAQkBFhNhZGl0eWFuYWdAZ21haWwuY29tMIGfMA0GCSqG > > SIb3DQEBAQUAA4GNADCBiQKBgQC7O4o1AXp4uOWxAAa7pr6nn50h1GFW2sxUlHu1 > > ZvsWQUKIqNidcUz7xCcFzw8S013j+zraHU24Zz0vLDkhxz4ELoAki1m2RLr5WMwQ > > vbQ/Ri07YpTKGcA+mTswlRr4qrZ6iHKmOoIjzR8x5h9jGx3i19+BgOuh8aSZPr1E > > uOfk+QIDAQABo4H5MIH2MB0GA1UdDgQWBBS003ZZndHzcSyuxNThkDlsGve65zCB > > xgYDVR0jBIG+MIG7gBS003ZZndHzcSyuxNThkDlsGve656GBn6SBnDCBmTELMAkG > > A1UEBhMCSU4xEjAQBgNVBAgTCVJhamFzdGhhbjEQMA4GA1UEBxMHSm9kaHB1cjEg > > MB4GA1UEChMXTmF0aW9uYWwgTGF3IFVuaXZlcnNpdHkxHjAcBgNVBAMTFW1haWwu > > bmx1am9kaHB1ci5hYy5pbjEiMCAGCSqGSIb3DQEJARYTYWRpdHlhbmFnQGdtYWls > > LmNvbYIBADAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBAUAA4GBABGASUJjpzwp > > vZgg3zllEKALd6o09pMePh4uSQ7X+cpbBie3BKANadwaQ32D20WA1aLprf1iLziG > > zFvvxlNPDKkjMQuNI/qlc7HF8/Vs/Nlwy3cyIRh3cs+sLgVQsQxtzGgS8sCyiPiP > > l550YaTCM9l4+bM2HQ/fbo+jGSsQOc04 > > -----END CERTIFICATE----- > > --- > > Server certificate > > subject=/C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > > issuer=/C=IN/ST=Rajasthan/L=Jodhpur/O=National Law > > University/CN=mail.nlujodhpur.ac.in/[EMAIL PROTECTED] > > --- > > No client certificate CA names sent > > --- > > SSL handshake has read 1576 bytes and written 350 bytes > > --- > > New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA > > Server public key is 1024 bit > > SSL-Session: > > Protocol : TLSv1 > > Cipher : DHE-RSA-AES256-SHA > > Session-ID: > > 020E7E7A0DEA3BBAFCC482DD1A7E45EA9576DDFFEB1840236ED30913F55C86DD > > Session-ID-ctx: > > Master-Key: > > 0AB21E3FDC14E123A37329F6A601EB663461601BF57322609577FA58741B6D5B3DC69267074C7E919D2480A8F424D0A6 > > Key-Arg : None > > Krb5 Principal: None > > Start Time: 1128687326 > > Timeout : 300 (sec) > > Verify return code: 18 (self signed certificate) > > --- > > 220 Welcome to Qmail Toaster Ver. 1.2 smtp Server ESMTP > > > > _____________________________________ > > > > That's what I get.. > > Regards, > > Aditya > > > > > > On 10/7/05, Erik Espinoza <[EMAIL PROTECTED]> wrote: > > > Type the following command at the prompt and paste back the response: > > > > > > $ openssl s_client -starttls smtp -showcerts -connect localhost:25 > > > > > > Thanks, > > > Erik > > > > > > On 10/7/05, Aditya Nag <[EMAIL PROTECTED]> wrote: > > > > my /var/qmail/control/me file contins one line, my servers FQDN. > > > > should there be something else here? > > > > > > > > Aditya > > > > > > > > > > > > On 10/7/05, Alvin Engler <[EMAIL PROTECTED]> wrote: > > > > > 1. /var/qmail/control/me should be set to the cname of your secure > > > > > certificate > > > > > 2. in order to get depreciated SMTP + SSL (port 465) working I had to > > > > > set up a custom process in /var/qmail/supervise/smtp-ssl. My "run" > > > > > file > > > > > is pasted below for reference. > > > > > > > > > > YMMV, > > > > > Alvin > > > > > > > > > > #!/bin/sh > > > > > QMAILDUID=`id -u vpopmail` > > > > > NOFILESGID=`id -g vpopmail` > > > > > MAXSMTPD=`cat /var/qmail/control/concurrencyincoming` > > > > > BLACKLIST=`cat /var/qmail/control/blacklists` > > > > > SMTPD="/var/qmail/bin/qmail-smtpd" > > > > > TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb" > > > > > RBLSMTPD="/usr/bin/rblsmtpd" > > > > > HOSTNAME=`hostname` > > > > > VCHKPW="/home/vpopmail/bin/vchkpw" > > > > > SMTPS=1 > > > > > export SMTPS > > > > > > > > > > exec /usr/bin/softlimit -m 12000000 \ > > > > > /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c > > > > > "$MAXSMTPD" \ > > > > > -u "$QMAILDUID" -g "$NOFILESGID" 0 465 \ > > > > > $RBLSMTPD $BLACKLIST $SMTPD $VCHKPW /bin/true 2>&1 > > > > > > > > > > Aditya Nag wrote: > > > > > > > > > > >Hi, > > > > > >So now everything is working, and my users are praising the speed of > > > > > >the new system.. Life is good. > > > > > > > > > > > >I have tested all the features and POP3, IMAP, POP3-SSL, IMAP-SSL are > > > > > >all working. But SMPT + TLS or SMTP + SSL does not work. Is there > > > > > >some > > > > > >way to get it working? I think Qmail toaster supports it, so I belive > > > > > >it's something wrong on my system. > > > > > > > > > > > >The error message I get with both SMTP-SSL and SMTP-TLS is "Unable to > > > > > >connect to the specified SMTP server" > > > > > > > > > > > >Normal SMTP works great. > > > > > > > > > > > >I did a tail -f /var/log/qmail/smtpd/current and tried to log in with > > > > > >SMPT-TLS and SMTP-SSL but it didn't show anything. > > > > > > > > > > > >I also tried switching off the firewall completely and then trying. > > > > > >No luck. > > > > > > > > > > > >what could i do to get this to work? > > > > > > > > > > > >Regards, > > > > > >Aditya > > > > > >-- > > > > > >www.adityanag.org > > > > > > > > > > > >--------------------------------------------------------------------- > > > > > >To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > > >For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > -- > > > > www.adityanag.org > > > > > > > > --------------------------------------------------------------------- > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > -- > > www.adityanag.org > > > > > -- > www.adityanag.org > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
