Re: Strange STARTTLS issue

2013-09-12 Thread Claus Assmann
On Thu, Sep 12, 2013, John Hynes wrote: > openssl s_client -starttls smtp -connect mail.dean.edu:25 > > ...from any of my OpenBSD 5.3 hosts, I get the same response: > CONNECTED(0003) > 12556912661392:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake > failure:/usr/src/lib/libssl/ssl/../

Re: Strange STARTTLS issue

2013-09-12 Thread John Hynes
After applying the patch, and recompiling with SSL_OP_NO_TLSv1_2, sendmail still gives the same error, although the -no-tls1_2 option gets the test to work. Are there other defines I need perhaps? -John On Thu, Sep 12, 2013 at 3:54 PM, Claus Assmann wrote: > On Thu, Sep 12, 2013, John Hynes w

Re: Strange STARTTLS issue

2013-09-12 Thread John Hynes
Nevermind - I mistype the define - it works. Thanks again, -John On Thu, Sep 12, 2013 at 5:10 PM, John Hynes wrote: > After applying the patch, and recompiling with SSL_OP_NO_TLSv1_2, sendmail > still gives the same error, although the -no-tls1_2 option gets the test to > work. > > Are there

Re: Strange STARTTLS issue

2013-09-12 Thread John Hynes
Thanks Claus - the option did work, so I'll go with the patch. -John On Thu, Sep 12, 2013 at 3:54 PM, Claus Assmann wrote: > On Thu, Sep 12, 2013, John Hynes wrote: > > > openssl s_client -starttls smtp -connect mail.dean.edu:25 > > > > ...from any of my OpenBSD 5.3 hosts, I get the same respo

Strange STARTTLS issue

2013-09-12 Thread John Hynes
Hi All, Issue: There is one host to whom I can't send mail from either of my relays (both OpenBSD 5.3, sendmail). It always fails the TLS handshake. If I attempt to debug it by hand by running: openssl s_client -starttls smtp -connect mail.dean.edu:25 ...from any of my OpenBSD 5.3 hosts, I get