Solved.  FIXCRIO was totally f'ing it  up, I simply commented it's
definition in the smtpd run file.

On Tue, Jul 1, 2008 at 2:10 PM, fbc <[EMAIL PROTECTED]> wrote:

> I'm running qmail toaster (all latest packages) on Fedora Core 6 and have
> the latest version of OpenSSL (in the official fc6 yum repositories) for it:
> [EMAIL PROTECTED] control]#* openssl version
> *OpenSSL 0.9.8b 04 May 2006*
>
> Since I upgraded to this newest version (I think that was the cause), no
> mail servers have been able to make encrypted connections, because of an
> error:
> [EMAIL PROTECTED] control]#* openssl s_client -starttls smtp -crlf -connect
> mail.myhost.tld:25
> *CONNECTED(00000003)
> 24182:error:0D07209B:asn1 encoding routines:ASN1_get_object:too
> long:asn1_lib.c:142:
> 24182:error:0D068066:asn1 encoding routines:ASN1_CHECK_TLEN:bad object
> header:tasn_dec.c:1278:
> 24182:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
> error:tasn_dec.c:208:Type=ASN1_PRINTABLE
> 24182:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested
> asn1 error:tasn_dec.c:749:Field=value, Type=X509_NAME_ENTRY
> 24182:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested
> asn1 error:tasn_dec.c:710:
> 24182:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested
> asn1 error:tasn_dec.c:710:
> 24182:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested
> asn1 error:tasn_dec.c:749:Field=issuer, Type=X509_CINF
> 24182:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested
> asn1 error:tasn_dec.c:749:Field=cert_info, Type=X509
> 24182:error:1409000D:SSL routines:SSL3_GET_SERVER_CERTIFICATE:ASN1
> lib:s3_clnt.c:866:*
>
> A few other commands that might mean something to somebody (but not me):
> [EMAIL PROTECTED] control]#* openssl verify -CAfile cabundle.pem -purpose
> sslclient /var/qmail/control/servercert.pem
> *servercert.pem: OK*
>
> [EMAIL PROTECTED] control]#* openssl asn1parse -inform -in -dump <
> /var/qmail/control/servercert.pem
> *0:d=0 hl=2 l= 45 cons: <ASN1 13>
> Error in encoding
> 7913:error:0D07209B:asn1 encoding routines:ASN1_get_object:too
> long:asn1_lib.c:142:*
>
> Has anyone seen this before?
> Thanks for any help
>
>

Reply via email to