I tried the ssl/tsl part of that test and got the following. I was on a
machine on the outside of our firewall with a routable IP address.
[EMAIL PROTECTED] ~]$ openssl s_client -starttls smtp -crlf -showcerts
-connect mail.ncbi.com:25
CONNECTED(00000003)
depth=0 /C=US/ST=Pennsylvania/L=Trevose/O=NCB Management
Services/OU=IT/CN=mail.ncbi.com/[EMAIL PROTECTED]
verify error:num=18:self signed certificate
verify return:1
depth=0 /C=US/ST=Pennsylvania/L=Trevose/O=NCB Management
Services/OU=IT/CN=mail.ncbi.com/[EMAIL PROTECTED]
verify return:1
---
Certificate chain
0 s:/C=US/ST=Pennsylvania/L=Trevose/O=NCB Management
Services/OU=IT/CN=mail.ncbi.com/[EMAIL PROTECTED]
i:/C=US/ST=Pennsylvania/L=Trevose/O=NCB Management
Services/OU=IT/CN=mail.ncbi.com/[EMAIL PROTECTED]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/C=US/ST=Pennsylvania/L=Trevose/O=NCB Management
Services/OU=IT/CN=mail.ncbi.com/[EMAIL PROTECTED]
issuer=/C=US/ST=Pennsylvania/L=Trevose/O=NCB Management
Services/OU=IT/CN=mail.ncbi.com/[EMAIL PROTECTED]
---
No client certificate CA names sent
---
SSL handshake has read 1618 bytes and written 341 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 1024 bit
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : DHE-RSA-AES256-SHA
Session-ID:
6405895298F4E6D05C30733F91525E7CFB8415209D7DAFFECE1E3E6E1F93130B
Session-ID-ctx:
Master-Key:
8D90F1BB652B90687D5205682F8E2B24D2D2E0E716EA4BE611606635B23D43C91503B73B6958
CD37A18727B5F0544400
Key-Arg : None
Krb5 Principal: None
Start Time: 1202919361
Timeout : 300 (sec)
Verify return code: 18 (self signed certificate)
---
220 qmail.ncbi.com - Welcome to Qmail Toaster Ver. 1.4 SMTP Server ESMTP
ehlo ids-external.ncbi.com
250-qmail.ncbi.com - Welcome to Qmail Toaster Ver. 1.4 SMTP Server
250-PIPELINING
250-8BITMIME
250-SIZE 589299712
250 AUTH LOGIN PLAIN CRAM-MD5
mail from: [EMAIL PROTECTED]
250 ok
rcpt to: [EMAIL PROTECTED]
250 ok
data
354 go ahead
Subject: test tls from the outside
To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED]
This should be the recordio test from the outside.
good bye
.
451 mail server temporarily rejected message (#4.3.0)
-----Original Message-----
From: Glenn Remstedt [mailto:[EMAIL PROTECTED]
Sent: Wednesday, February 13, 2008 10:41 AM
To: [email protected]
Subject: Re: [qmailtoaster] Test ssl/tls communications
Raymond Webster wrote:
> Is there a way to test the ssl/tls functionality of the toaster? I
> have a client that cannot send emails to us and their hosted exchange
> server is using ssl/tls.
>
> Ray Webster
>
try this out:
http://qmail.jms1.net/test-auth.shtml
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
