The cert's probably ok. I'm guessing that the destination server can't
handle the more secure ciphers that are being used now (the newer QMT is
hardened a bit security wise).
Try this:
# cd /var/qmail/control
# mv tlsserverciphers tlsserverciphers.qmt
# ln -s tlsserverciphers.dist tlsserverciphers
You might need to restart qmail after doing this. That should put you
back to the older more permissive (and insecure) ciphers.
You may or may not have a tlsciphers.dist file. If you don't, I've
attached one from my COS6 QMT (although I don't use it - I use the more
secure one).
Let us know if that does it for you.
Thanks.
--
-Eric 'shubes'
On 10/13/2014 11:42 AM, Rajesh M. wrote:
hi
i also get following message
deferral:
TLS_connect_failed:_error:14077410:SSL_routines:SSL23_GET_SERVER_HELLO:sslv3_alert_handshake_failure;deferral:
TLS_connect_failed:_error:14077410:SSL_routines:SSL23_GET_SERVER_HELLO:sslv3_alert_handshake_failure;
rajesh
----- Original Message -----
From: Rajesh M. [mailto:[email protected]]
To: [email protected]
Sent: Mon, 13 Oct 2014 23:06:10 +0530
Subject: Re: [qmailtoaster] tls connect errors
i am getting errors like this
2014-10-13 22:59:11.643242500 delivery 68: deferral:
TLS_connect_failed;_connected_to_94.56.16.164./
basically i am referring to email communication betwen my server to the
recepient's server.
my users are sending using normal smtp authenticated connection using outlook.
rajesh
----- Original Message -----
From: Cecil Yother, Jr. [mailto:[email protected]]
To: [email protected]
Sent: Mon, 13 Oct 2014 10:21:01 -0700
Subject: Re: [qmailtoaster] tls connect errors
What do your secure (TLS) logs say?
On 10/13/2014 09:36 AM, Rajesh M. wrote:
urgent help required please
emails sentby our clients to various domains are bouncing back from all 4
servers which has identical qmail installation.
if it cannot be fixed immediately then please let me know how to disable tls
based outgoing emailing
rajesh
----- Original Message -----
From: Rajesh M. [mailto:[email protected]]
To: [email protected]
Sent: Mon, 13 Oct 2014 19:03:47 +0530
Subject: [qmailtoaster] tls connect errors
hi eric
we are getting tls connect errors
2014-10-11 17:22:42.852046500 delivery 272885: deferral: TLS_connect_failed:
_error:14077410:SSL_routines:SSL23_GET_SERVER_HELLO:sslv3_alert_handshake_failure;_connected_to_82.148.101.101./
in our previous centos 5 32 bit installation of qmail the permissions were
-rw-r--r-- 1 root qmail 493 Oct 13 01:01 rsa512.pem
-rw-r--r-- 1 root qmail 1689 Nov 13 2012 servercert.pem
and this works correctly
in the new installation 64 bit
the permissions are
-rw-r--r-- 1 root qmail 493 Oct 13 01:01 rsa512.pem
-rw-r----- 1 root vchkpw 2830 Oct 10 22:27 servercert.pem
and we are getting tls errors
help required please
rajesh
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:KRB5-DES-CBC3-MD5:KRB5-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DES-CBC3-MD5:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:RC2-CBC-MD5:KRB5-RC4-MD5:KRB5-RC4-SHA:RC4-SHA:RC4-MD5:RC4-MD5:KRB5-DES-CBC-MD5:KRB5-DES-CBC-SHA:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:DES-CBC-MD5:EXP-KRB5-RC2-CBC-MD5:EXP-KRB5-DES-CBC-MD5:EXP-KRB5-RC2-CBC-SHA:EXP-KRB5-DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC2-CBC-MD5:EXP-KRB5-RC4-MD5:EXP-KRB5-RC4-SHA:EXP-RC4-MD5:EXP-RC4-MD5
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
