thanks very much eric i simply backed up the tlsserverciphers and edited the existing tlsserverciphers
it worked. i hope it does not matter if do not create the new tlsserverciphers.dist file rajesh ----- Original Message ----- From: Eric Shubert [mailto:[email protected]] To: [email protected] Sent: Mon, 13 Oct 2014 17:09:42 -0700 Subject: [qmailtoaster] Re: tls connect errors : extremely urgent The cert's probably ok. I'm guessing that the destination server can't handle the more secure ciphers that are being used now (the newer QMT is hardened a bit security wise). Try this: # cd /var/qmail/control # mv tlsserverciphers tlsserverciphers.qmt # ln -s tlsserverciphers.dist tlsserverciphers You might need to restart qmail after doing this. That should put you back to the older more permissive (and insecure) ciphers. You may or may not have a tlsciphers.dist file. If you don't, I've attached one from my COS6 QMT (although I don't use it - I use the more secure one). Let us know if that does it for you. Thanks. -- -Eric 'shubes' On 10/13/2014 11:42 AM, Rajesh M. wrote: > hi > > i also get following message > > deferral: > TLS_connect_failed:_error:14077410:SSL_routines:SSL23_GET_SERVER_HELLO:sslv3_alert_handshake_failure;deferral: > > TLS_connect_failed:_error:14077410:SSL_routines:SSL23_GET_SERVER_HELLO:sslv3_alert_handshake_failure; > > rajesh > > ----- Original Message ----- > From: Rajesh M. [mailto:[email protected]] > To: [email protected] > Sent: Mon, 13 Oct 2014 23:06:10 +0530 > Subject: Re: [qmailtoaster] tls connect errors > > i am getting errors like this > > 2014-10-13 22:59:11.643242500 delivery 68: deferral: > TLS_connect_failed;_connected_to_94.56.16.164./ > > basically i am referring to email communication betwen my server to the > recepient's server. > > my users are sending using normal smtp authenticated connection using outlook. > > rajesh > > > ----- Original Message ----- > From: Cecil Yother, Jr. [mailto:[email protected]] > To: [email protected] > Sent: Mon, 13 Oct 2014 10:21:01 -0700 > Subject: Re: [qmailtoaster] tls connect errors > > What do your secure (TLS) logs say? > > > On 10/13/2014 09:36 AM, Rajesh M. wrote: >> urgent help required please >> >> emails sentby our clients to various domains are bouncing back from all 4 >> servers which has identical qmail installation. >> >> if it cannot be fixed immediately then please let me know how to disable tls >> based outgoing emailing >> >> rajesh >> >> ----- Original Message ----- >> From: Rajesh M. [mailto:[email protected]] >> To: [email protected] >> Sent: Mon, 13 Oct 2014 19:03:47 +0530 >> Subject: [qmailtoaster] tls connect errors >> >> hi eric >> >> we are getting tls connect errors >> >> 2014-10-11 17:22:42.852046500 delivery 272885: deferral: TLS_connect_failed: >> _error:14077410:SSL_routines:SSL23_GET_SERVER_HELLO:sslv3_alert_handshake_failure;_connected_to_82.148.101.101./ >> >> in our previous centos 5 32 bit installation of qmail the permissions were >> >> -rw-r--r-- 1 root qmail 493 Oct 13 01:01 rsa512.pem >> -rw-r--r-- 1 root qmail 1689 Nov 13 2012 servercert.pem >> >> and this works correctly >> >> in the new installation 64 bit >> the permissions are >> >> -rw-r--r-- 1 root qmail 493 Oct 13 01:01 rsa512.pem >> -rw-r----- 1 root vchkpw 2830 Oct 10 22:27 servercert.pem >> >> and we are getting tls errors >> >> >> help required please >> >> >> rajesh >> >> >> >> >> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] >
--------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
