Hello,
Further, and I guess it is all linked together (not linked in the ldd sense), I
get cores.
==> mail/mail.warn <==
Nov 12 11:29:09 sonne postfix/tlsproxy[3242552]: warning: TLS library problem:
error:0A000102:SSL routines::unsupported
protocol:../ssl/statem/statem_srvr.c:1657:
Nov 12 11:29:09 sonne postfix/master[3192017]: warning: process
/usr/lib/postfix/tlsproxy pid 3242552 killed by signal 11
Can you build non-stripped Postfix binaries, preferably withg debug info:
make makefiles DEBUG=-g ...
As root:
make upgrade
In master.cf, add "-D" (without the quotes) at the end of the tlsproxy line:
Edit main.cf following steps in https://www.postfix.org/DEBUG_README.html#gdb
That will log some line numbers that identify the point of failure.
Î did that and this is the first thing thrown:
cat tlsproxy.3678563.log
GNU gdb (Ubuntu 15.0.50.20240403-0ubuntu1) 15.0.50.20240403-git
Copyright (C) 2024 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<https://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/lib/postfix/tlsproxy...
Attaching to program: /usr/lib/postfix/tlsproxy, process 3678563
Reading symbols from /usr/lib/postfix/libpostfix-master.so...
Reading symbols from /usr/lib/postfix/libpostfix-tls.so...
Reading symbols from /usr/lib/postfix/libpostfix-dns.so...
Reading symbols from /usr/lib/postfix/libpostfix-global.so...
Reading symbols from /usr/lib/postfix/libpostfix-util.so...
Reading symbols from /lib/x86_64-linux-gnu/libssl.so.3...
(No debugging symbols found in /lib/x86_64-linux-gnu/libssl.so.3)
Reading symbols from /lib/x86_64-linux-gnu/libcrypto.so.3...
(No debugging symbols found in /lib/x86_64-linux-gnu/libcrypto.so.3)
Reading symbols from /lib/x86_64-linux-gnu/libc.so.6...
Reading symbols from
/usr/lib/debug/.build-id/6d/64b17fbac799e68da7ebd9985ddf9b5cb375e6.debug...
Reading symbols from /usr/local/lib/libtlsrpt.so.0...
Reading symbols from /lib/x86_64-linux-gnu/libnsl.so.2...
(No debugging symbols found in /lib/x86_64-linux-gnu/libnsl.so.2)
Reading symbols from /lib/x86_64-linux-gnu/libdb-5.3.so...
Reading symbols from
/usr/lib/debug/.build-id/d8/150d3a18d1cf28db09b7e330ca33c3b4619db6.debug...
Reading symbols from /lib64/ld-linux-x86-64.so.2...
Reading symbols from
/usr/lib/debug/.build-id/35/3e1b6cb0eebc08cf3ff812eae8a51b4efd684e.debug...
Reading symbols from /lib/x86_64-linux-gnu/libtirpc.so.3...
(No debugging symbols found in /lib/x86_64-linux-gnu/libtirpc.so.3)
Reading symbols from /lib/x86_64-linux-gnu/libgssapi_krb5.so.2...
(No debugging symbols found in /lib/x86_64-linux-gnu/libgssapi_krb5.so.2)
Reading symbols from /lib/x86_64-linux-gnu/libkrb5.so.3...
(No debugging symbols found in /lib/x86_64-linux-gnu/libkrb5.so.3)
Reading symbols from /lib/x86_64-linux-gnu/libk5crypto.so.3...
(No debugging symbols found in /lib/x86_64-linux-gnu/libk5crypto.so.3)
Reading symbols from /lib/x86_64-linux-gnu/libcom_err.so.2...
(No debugging symbols found in /lib/x86_64-linux-gnu/libcom_err.so.2)
Reading symbols from /lib/x86_64-linux-gnu/libkrb5support.so.0...
(No debugging symbols found in /lib/x86_64-linux-gnu/libkrb5support.so.0)
Reading symbols from /lib/x86_64-linux-gnu/libkeyutils.so.1...
(No debugging symbols found in /lib/x86_64-linux-gnu/libkeyutils.so.1)
Reading symbols from /lib/x86_64-linux-gnu/libresolv.so.2...
Reading symbols from
/usr/lib/debug/.build-id/13/8af0550a1108eae7456ae809e8a74aa3fd7fd8.debug...
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
0x00007637ddd107a7 in __GI___wait4 (pid=3678564,
stat_loc=stat_loc@entry=0x7fff246a1d88, options=options@entry=0,
usage=usage@entry=0x0) at ../sysdeps/unix/sysv/linux/wait4.c:30
(gdb) Continuing.
[Inferior 1 (process 3678563) exited normally]
(gdb) (gdb)
==> mail/mail.warn <==
Nov 12 11:29:09 sonne postfix/tlsproxy[3242552]: warning: TLS library problem:
error:0A000102:SSL routines::unsupported
protocol:../ssl/statem/statem_srvr.c:1657:
Nov 12 11:29:09 sonne postfix/master[3192017]: warning: process
/usr/lib/postfix/tlsproxy pid 3242552 killed by signal 11
Isn't that the OpenSSL server-side code? Did this happen immediately
after a client connects to postscreen?
Possibly. Without tlsrpt code it never crashed though.
It is the out of the box ubuntu 24.04.1 package
OpenSSL 3.0.13 30 Jan 2024 (Library: OpenSSL 3.0.13 30 Jan 2024)
Package: openssl
Version: 3.0.13-0ubuntu3.4
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
