On 05/14/2014 04:26 AM, Janno Sannik wrote:
I have a problem with tls.
Sending email form outside mailserver to my qmail box says : 4.7.0 TLS
handshake failed
I can send email using thunderbird and starttls ( verified it by
changing permissions of servercert.pem to something wrong and
thunderbird then fails to send email).
This is ok:
Escape character is '^]'.
220 server Mailserver @your service ESMTP
ehlo
250-server Mailserver @your service
250-STARTTLS
250-PIPELINING
250-8BITMIME
250-SIZE 20971520
250 AUTH LOGIN PLAIN CRAM-MD5
starttls
220 ready for tls
This is not ok (even thou thundebird still works):
#openssl s_client -starttls smtp -connect server:25
CONNECTED(00000003)
139761529947976:error:140770FC:SSL
routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:766:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 216 bytes and written 298 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
---
---------------------------------------------------------------------
Do you know anything about it (os, smtp software)?
Is the outside mailserver a legitimate mail server?
Have you applied any changes to tlsserverciphers?
Please post contents of tlsserverciphers.
My guess is that you may have strengthened your ciphers (discussed here
recently), and the sending server can't handle the stronger key length.
--
-Eric 'shubes'
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
