Le 14/04/2013 17:45, Viktor Dukhovni a écrit :
> On Sun, Apr 14, 2013 at 07:33:21PM +0200, Reindl Harald wrote: > Am 14.04.2013 19:24, schrieb Viktor Dukhovni: On Sun, Apr 14, 2013 at > 07:22:28PM +0200, Reindl Harald wrote: -UHAS_IPV6 -DUSE_TLS > -I/usr/include/mysql/ -I/usr/include/sasl ' 'AUXLIBS=-L/usr/lib/mysql/ > -lmysqlclient -lssl -lcrypto -lz -lm -lpcre -lsasl2' i am missing here the > path to openssl below the ARGS from my fedora-rpm-SPEC -DUSE_TLS > -I/usr/include/openssl This is not a good idea. The OpenSSL header files are accessed by Postfix via: #include <openssl/mumble.h> Unless you have /usr/include/openssl/opennssl/ssl.h you should NOT do this Fedora has (i guess openssl/opennssl was a typo) No, I meant what I wrote. > [root@buildserver:~]$ rpm -q --file /usr/include/openssl/ssl.h > openssl-devel-1.0.0k-1.fc17.20130221.rh.x86_64 For this Postfix needs -I/usr/include (the default), and does NOT need -I/usr/include/openssl. Ok, I have now proper install of postfix / openssl / cyrsus / etc... I still get : 2013-04-14T20:29:44.951208+02:00 server postfix/smtpd[12926]: setting up TLS connection from unknown[41.137.65.121] 2013-04-14T20:29:44.951227+02:00 server postfix/smtpd[12926]: unknown[41.137.65.121]: TLS cipher list "aNULL:-aNULL:ALL:!EXPORT:!LOW:+RC4:@STRENGTH" 2013-04-14T20:29:44.951422+02:00 server postfix/smtpd[12926]: SSL_accept:before/accept initialization 2013-04-14T20:29:44.951502+02:00 server postfix/smtpd[12926]: SSL_accept:SSLv3 read client hello A 2013-04-14T20:29:44.951510+02:00 server postfix/smtpd[12926]: SSL_accept:SSLv3 write server hello A 2013-04-14T20:29:44.951520+02:00 server postfix/smtpd[12926]: SSL_accept:SSLv3 write certificate A 2013-04-14T20:29:44.954011+02:00 server postfix/smtpd[12926]: SSL_accept:SSLv3 write key exchange A 2013-04-14T20:29:44.954021+02:00 server postfix/smtpd[12926]: SSL_accept:SSLv3 write server done A 2013-04-14T20:29:44.954025+02:00 server postfix/smtpd[12926]: SSL_accept:SSLv3 flush data 2013-04-14T20:29:45.074066+02:00 server postfix/smtpd[12926]: SSL_accept:SSLv3 read client key exchange A 2013-04-14T20:29:45.074085+02:00 server postfix/smtpd[12926]: SSL_accept:error in SSLv3 read certificate verify A 2013-04-14T20:29:45.074091+02:00 server postfix/smtpd[12926]: SSL_accept error from unknown[41.137.65.121]: -1 2013-04-14T20:29:45.074096+02:00 server postfix/smtpd[12926]: warning: TLS library problem: 12926:error:1409D08A:SSL routines:SSL3_SETUP_KEY_BLOCK:cipher or hash unavailable:s3_enc.c:402: 2013-04-14T20:29:45.074367+02:00 server postfix/smtpd[12926]: lost connection after CONNECT from unknown[41.137.65.121] 2013-04-14T20:29:45.074390+02:00 server postfix/smtpd[12926]: disconnect from unknown[41.137.65.121] What shall I do to fix this ? Thank you in advance Joan