Re: TLS with openssl 0.9.8m

2010-03-22 Thread Richard van den Berg
On 15-3-10 16:49 , Quanah Gibson-Mount wrote: We use self-signed certs with Postfix, and StartTLS on port 25 works just fine. Postfix is linked against OpenSSL 0.9.8m for us. Is the signature algorithm of your cert sha256WithRSAEncryption ? It looks like there is a bug in postfix where

Re: TLS with openssl 0.9.8m

2010-03-22 Thread Richard van den Berg
On 22-3-10 22:06 , Richard van den Berg wrote: Apparently postfix does not call SSL_library_init() / OpenSSL_add_ssl_algorithms(), see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573748 and http://marc.info/?l=openssl-devm=126925010314573w=2 Correction: postfix doesn't call

Re: TLS with openssl 0.9.8m

2010-03-22 Thread Victor Duchovni
On Mon, Mar 22, 2010 at 10:08:31PM +0100, Richard van den Berg wrote: On 22-3-10 22:06 , Richard van den Berg wrote: Apparently postfix does not call SSL_library_init() / OpenSSL_add_ssl_algorithms(), see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573748 and

Re: TLS with openssl 0.9.8m

2010-03-15 Thread Quanah Gibson-Mount
--On Sunday, March 14, 2010 4:34 PM +0100 Richard van den Berg rich...@vdberg.org wrote: Is anyone here successfully using self signed server certificates in combination with openssl 0.9.8m ? I just upgraded from 0.9.8k and I am getting these errors whenever a starttls is received: This is

Re: TLS with openssl 0.9.8m

2010-03-15 Thread mouss
Richard van den Berg a écrit : Is anyone here successfully using self signed server certificates in combination with openssl 0.9.8m ? I just upgraded from 0.9.8k and I am getting these errors whenever a starttls is received: works on FreeBSD: $ uname FreeBSD $ postconf mail_version

Re: TLS with openssl 0.9.8m

2010-03-15 Thread Victor Duchovni
On Sun, Mar 14, 2010 at 04:34:41PM +0100, Richard van den Berg wrote: Mar 14 08:47:04 majoron postfix/smtpd[31776]: SSL_accept:error in SSLv3 read client certificate A Various SMTP clients are known to mis-handle requests for client certificates. You have not posted your postconf -n output

TLS with openssl 0.9.8m

2010-03-14 Thread Richard van den Berg
Is anyone here successfully using self signed server certificates in combination with openssl 0.9.8m ? I just upgraded from 0.9.8k and I am getting these errors whenever a starttls is received: Mar 14 08:47:04 majoron postfix/smtpd[31776]: SSL_accept:error in SSLv3 read client certificate A