[Bug 1001040] [NEW] TLS library problem drops incoming mail when sender uses RC4-MD5 cipher

2012-05-17 Thread Eric Lambart
Public bug reported: Everytime my email server (Ubuntu Server 12.04) receives an email sent from google.com (e.g. gmail) using TLS with the RC4-MD5 cipher, it fails. Here is the output of once such interaction. I have set smtpd_tls_loglevel=2 in /etc/postfix/main.cf in hopes this will help.

[Bug 1001040] Re: TLS library problem drops incoming mail when sender uses RC4-MD5 cipher

2012-05-17 Thread Eric Lambart
** Description changed: Everytime my email server (Ubuntu Server 12.04) receives an email sent from google.com (e.g. gmail) using TLS with the RC4-MD5 cipher, it fails. Here is the output of once such interaction. I have set smtpd_tls_loglevel=2 in /etc/postfix/main.cf in hopes this

[Bug 1001040] Re: TLS library problem drops incoming mail when sender uses RC4-MD5 cipher

2012-05-17 Thread Eric Lambart
This server has only been running a couple days. I initially performed all my testing for emails sent from outside using gmail.com and it seemd that my emails came through no problem. I now see that google.com also uses cipher ECDHE-RSA-RC4-SHA, and messages received (by me) using this cipher do

[Bug 1001040] Re: TLS library problem drops incoming mail when sender uses RC4-MD5 cipher

2012-05-17 Thread Eric Lambart
Using self-signed certificate... -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to postfix in Ubuntu. https://bugs.launchpad.net/bugs/1001040 Title: TLS library problem drops incoming mail when sender uses RC4-MD5 cipher To manage

[Bug 1001040] Re: TLS library problem drops incoming mail when sender uses RC4-MD5 cipher

2012-05-17 Thread Eric Lambart
Have circumvented the problem by adding smtpd_tls_exclude_ciphers = RC4-MD5 to my /etc/postfix/main.cf. Google is now using RC4-SHA instead, and I've experienced no further problems so far. Obviously this may not be a postfix bug (it seems openssl-related issues can even be cause by compiler