Re: Issues with Thunderbird and STARTTLS (Pipelining not supported)

2018-12-17 Thread Matt Schwartz
Glad you're up and running again. Thunderbird is kind of funny like that.

On Mon, Dec 17, 2018, 8:26 AM mabi  ‐‐‐ Original Message ‐‐‐
> On Monday, December 17, 2018 1:49 PM, Matt Schwartz <
> matt.schwart...@gmail.com> wrote:
>
> Right off the bat, I think the mask-src might be causing a problem. I know
> that Thunderbird does some weird stuff and it doesn't play well with
> OpenSMTPD's correct implementation of smtps but you're using starttls. So
> instead of mask-src, try using the hostname parameter and set it to the
> hostname that you want to use.
>
>
> Spot on, that was it. I simply removed mask-src and STARTTLS works nicely
> with Thunderbird too.
>
> Thanks Matt and Edgar for answering!
>
>


Re: Issues with Thunderbird and STARTTLS (Pipelining not supported)

2018-12-17 Thread mabi
‐‐‐ Original Message ‐‐‐
On Monday, December 17, 2018 1:49 PM, Matt Schwartz  
wrote:

> Right off the bat, I think the mask-src might be causing a problem. I know 
> that Thunderbird does some weird stuff and it doesn't play well with 
> OpenSMTPD's correct implementation of smtps but you're using starttls. So 
> instead of mask-src, try using the hostname parameter and set it to the 
> hostname that you want to use.

Spot on, that was it. I simply removed mask-src and STARTTLS works nicely with 
Thunderbird too.

Thanks Matt and Edgar for answering!

Re: Issues with Thunderbird and STARTTLS (Pipelining not supported)

2018-12-17 Thread Edgar Pettijohn

On Dec 17, 2018 6:49 AM, Matt Schwartz  wrote:
>
> Right off the bat, I think the mask-src might be causing a problem. I know that Thunderbird does some weird stuff and it doesn't play well with OpenSMTPD's correct implementation of smtps but you're using starttls. So instead of mask-src, try using the hostname parameter and set it to the hostname that you want to use.
>
> On Mon, Dec 17, 2018, 7:31 AM mabi 
>>
>> Right, I forgot that sorry. Here it is:
>>
>> pki mail.mydomain.org cert "/etc/ssl/mail.mydomain.org.crt"
>> pki mail.mydomain.org key "/etc/ssl/private/mail.mydomain.org.key"
>>
>> table aliases file:/etc/mail/aliases
>> table domains postgres:/etc/mail/postgresql.conf
>> table virtuals postgres:/etc/mail/postgresql.conf
>> table credentials postgres:/etc/mail/postgresql.conf
>>
>> listen on egress port 25  hostname mail.mydomain.org tls pki mail.mydomain.org
>> listen on egress port 587 hostname mail.mydomain.org tls-require pki mail.mydomain.org auth  mask-src
>>
>> action "local" mbox alias 
>> action "relay" relay
>> action "lmtp_dovecot" lmtp "/var/dovecot/lmtp" rcpt-to virtual 
>>
>> match for local action "local"
>> match from any for domain  action "lmtp_dovecot"
>> match auth from any for any action "relay"
>>
>>
>>
>> ‐‐‐ Original Message ‐‐‐
>> On Monday, December 17, 2018 1:21 PM, Matt Schwartz  wrote:
>>
>>> Please share your smtpd.conf file. OpenSMTPD 6.4.1 works just fine with Thunderbird.
>>>
>>> On Mon, Dec 17, 2018, 7:16 AM mabi 

 Hi,

 I just configured OpenSMTPD on OpenBSD 6.4 with authentication to send mails as a MSA (port 587). I did some tests with swaks and TLS enabled and it works fine but with Thunderbird it miserably fails to use STARTTLS. On the server side I get:

 500 5.5.1 Invalid command: Pipelining not supported

 Is Thunderbird somehow so broken that it doesn't even respect that OpenSMTPD does not support SMTP pipelining?

 I am using Thunderbird 60.3.0...

 Any workarounds?

 Also I was wondering if OpenSMTPD supports other authentication types additionally to PLAIN and LOGIN?

 Regards,
 Mabi







 -- 
 You received this mail because you are subscribed to misc@opensmtpd.org
 To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org

>>
I recently had a typo causing the wrong pki certs to be used and for some reason the logs were complaining about pipelining. Perhaps test with openssl s_client if the certs could potentially be the problem.
Edgar


Re: Issues with Thunderbird and STARTTLS (Pipelining not supported)

2018-12-17 Thread Matt Schwartz
Right off the bat, I think the mask-src might be causing a problem. I know
that Thunderbird does some weird stuff and it doesn't play well with
OpenSMTPD's correct implementation of smtps but you're using starttls. So
instead of mask-src, try using the hostname parameter and set it to the
hostname that you want to use.

On Mon, Dec 17, 2018, 7:31 AM mabi  Right, I forgot that sorry. Here it is:
>
> pki mail.mydomain.org cert "/etc/ssl/mail.mydomain.org.crt"
> pki mail.mydomain.org key "/etc/ssl/private/mail.mydomain.org.key"
>
> table aliases file:/etc/mail/aliases
> table domains postgres:/etc/mail/postgresql.conf
> table virtuals postgres:/etc/mail/postgresql.conf
> table credentials postgres:/etc/mail/postgresql.conf
>
> listen on egress port 25  hostname mail.mydomain.org tls pki
> mail.mydomain.org
> listen on egress port 587 hostname mail.mydomain.org tls-require pki
> mail.mydomain.org auth  mask-src
>
> action "local" mbox alias 
> action "relay" relay
> action "lmtp_dovecot" lmtp "/var/dovecot/lmtp" rcpt-to virtual 
>
> match for local action "local"
> match from any for domain  action "lmtp_dovecot"
> match auth from any for any action "relay"
>
>
>
> ‐‐‐ Original Message ‐‐‐
> On Monday, December 17, 2018 1:21 PM, Matt Schwartz <
> matt.schwart...@gmail.com> wrote:
>
> Please share your smtpd.conf file. OpenSMTPD 6.4.1 works just fine with
> Thunderbird.
>
> On Mon, Dec 17, 2018, 7:16 AM mabi 
>> Hi,
>>
>> I just configured OpenSMTPD on OpenBSD 6.4 with authentication to send
>> mails as a MSA (port 587). I did some tests with swaks and TLS enabled and
>> it works fine but with Thunderbird it miserably fails to use STARTTLS. On
>> the server side I get:
>>
>> 500 5.5.1 Invalid command: Pipelining not supported
>>
>> Is Thunderbird somehow so broken that it doesn't even respect that
>> OpenSMTPD does not support SMTP pipelining?
>>
>> I am using Thunderbird 60.3.0...
>>
>> Any workarounds?
>>
>> Also I was wondering if OpenSMTPD supports other authentication types
>> additionally to PLAIN and LOGIN?
>>
>> Regards,
>> Mabi
>>
>>
>>
>>
>>
>>
>>
>> --
>> You received this mail because you are subscribed to misc@opensmtpd.org
>> To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
>>
>>
>


Re: Issues with Thunderbird and STARTTLS (Pipelining not supported)

2018-12-17 Thread Matt Schwartz
Please share your smtpd.conf file. OpenSMTPD 6.4.1 works just fine with
Thunderbird.

On Mon, Dec 17, 2018, 7:16 AM mabi  Hi,
>
> I just configured OpenSMTPD on OpenBSD 6.4 with authentication to send
> mails as a MSA (port 587). I did some tests with swaks and TLS enabled and
> it works fine but with Thunderbird it miserably fails to use STARTTLS. On
> the server side I get:
>
> 500 5.5.1 Invalid command: Pipelining not supported
>
> Is Thunderbird somehow so broken that it doesn't even respect that
> OpenSMTPD does not support SMTP pipelining?
>
> I am using Thunderbird 60.3.0...
>
> Any workarounds?
>
> Also I was wondering if OpenSMTPD supports other authentication types
> additionally to PLAIN and LOGIN?
>
> Regards,
> Mabi
>
>
>
>
>
>
>
> --
> You received this mail because you are subscribed to misc@opensmtpd.org
> To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
>
>


Issues with Thunderbird and STARTTLS (Pipelining not supported)

2018-12-17 Thread mabi
Hi,

I just configured OpenSMTPD on OpenBSD 6.4 with authentication to send mails as 
a MSA (port 587). I did some tests with swaks and TLS enabled and it works fine 
but with Thunderbird it miserably fails to use STARTTLS. On the server side I 
get:

500 5.5.1 Invalid command: Pipelining not supported

Is Thunderbird somehow so broken that it doesn't even respect that OpenSMTPD 
does not support SMTP pipelining?

I am using Thunderbird 60.3.0...

Any workarounds?

Also I was wondering if OpenSMTPD supports other authentication types 
additionally to PLAIN and LOGIN?

Regards,
Mabi







--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org