On Thu, Jul 11, 2013 at 01:48:01PM +0000, Viktor Dukhovni wrote: > Unfortunately, the "reconnect" code in s_client (at least with > 0.9.8j) forgets to do SMTP "STARTTLS", so this fails because > "220 hostname" is not an SSL server HELO.
Fix reported in 2008, not yet applied: https://rt.openssl.org/Ticket/Display.html?id=1766&user=guest&pass=guest I've posted a further simplified patch to openssl-users, perhaps it will be adopted this time (in the next iteration of 1.0.1, ...). -- Viktor.