Re: "Pipelining not supported" when connecting to port smtp or submission through OpenSSL command line utility

2019-01-22 Thread Gilles Chehade
On Sat, Jan 19, 2019 at 02:03:33PM -0600, ed...@pettijohn-web.com wrote:
> On Sat, Jan 19, 2019 at 08:12:29PM +0100, Johannes Krottmayer wrote:
> > Hello,
> > 
> > I have a question or a problem of understanding.
> > 
> > When I try to connect through the the command line utility openssl to
> > port smtp or submission I get this output:
> > 
> > $ openssl s_client -connect odin42:25
> 
> openssl s_client -connect host:port -starttls smtp
> 
> I did the same thing and forgot the starttls bit. The whole pipelining
> thing doesn't really help to figure it out though.
> 

yes :-/

the problem is that the SMTP engine expects an SMTP session, and instead
it receives a blob which violates the protocol and likely contains a new
line that triggers pipeline violation mechanism.

maybe we can do better, will talk with others.



-- 
Gilles Chehade @poolpOrg

https://www.poolp.org tip me: https://paypal.me/poolpOrg

-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org



Re: "Pipelining not supported" when connecting to port smtp or submission through OpenSSL command line utility

2019-01-19 Thread edgar
On Sat, Jan 19, 2019 at 08:12:29PM +0100, Johannes Krottmayer wrote:
> Hello,
> 
> I have a question or a problem of understanding.
> 
> When I try to connect through the the command line utility openssl to
> port smtp or submission I get this output:
> 
> $ openssl s_client -connect odin42:25

openssl s_client -connect host:port -starttls smtp

I did the same thing and forgot the starttls bit. The whole pipelining
thing doesn't really help to figure it out though.

> CONNECTED(0003)
> 139782539474752:error:1408F10B:SSL routines:ssl3_get_record:wrong
> version number:ssl/record/ssl3_record.c:252:
> ---
> no peer certificate available
> ---
> No client certificate CA names sent
> ---
> SSL handshake has read 5 bytes and written 176 bytes
> Verification: OK
> ---
> New, (NONE), Cipher is (NONE)
> Secure Renegotiation IS NOT supported
> Compression: NONE
> Expansion: NONE
> No ALPN negotiated
> SSL-Session:
> Protocol  : TLSv1.2
> Cipher: 
> Session-ID:
> Session-ID-ctx:
> Master-Key:
> PSK identity: None
> PSK identity hint: None
> SRP username: None
> Start Time: 1547924099
> Timeout   : 7200 (sec)
> Verify return code: 0 (ok)
> Extended master secret: no
> ---
> $
> 
> And in /var/log/maillog on the server these messages appears:
> 
> Jan 19 19:41:07 odin42 smtpd[25442]: 430c551fc99f310d smtp connected
> address=194.96.2.67 host=194-96-2-67.adsl.highway.telekom.at
> Jan 19 19:41:07 odin42 smtpd[25442]: 430c551fc99f310d smtp bad-input
> address=194.96.2.67 host=194-96-2-67.adsl.highway.telekom.at result="500
> 5.5.1 Invalid command: Pipelining not supported"
> Jan 19 19:41:07 odin42 smtpd[25442]: 430c551fc99f310d smtp disconnected
> address=194.96.2.67 host=194-96-2-67.adsl.highway.telekom.at reason=quit
> 
> When I connect to smtps port, everything works fine.
> 
> Here is my listen setup of OpenSMTPD:
> 
> # listen setup
> listen on lo0
> listen on lo0 port 10028 tag DKIM
> listen on egress tls pki mx1.krottmayer.com.pki auth-optional
> listen on egress smtps pki mx1.krottmayer.com.pki auth
> listen on egress port submission tls pki mx1.krottmayer.com.pki auth
> 
> Could somebody check my configuration, please?
> 
> Thanks in advance!
> 
> -- 
> Best regards,
> 
> Johannes
> 
> -- 
> You received this mail because you are subscribed to misc@opensmtpd.org
> To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
> 

-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org