Re: TLS with openssl 0.9.8m

2010-03-22 Thread Victor Duchovni
On Mon, Mar 22, 2010 at 10:08:31PM +0100, Richard van den Berg wrote: > On 22-3-10 22:06 , Richard van den Berg wrote: >> Apparently postfix does not call SSL_library_init() / >> OpenSSL_add_ssl_algorithms(), see >> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573748 and >> http://marc.info

Re: TLS with openssl 0.9.8m

2010-03-22 Thread Richard van den Berg
On 22-3-10 22:06 , Richard van den Berg wrote: Apparently postfix does not call SSL_library_init() / OpenSSL_add_ssl_algorithms(), see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573748 and http://marc.info/?l=openssl-dev&m=126925010314573&w=2 Correction: postfix doesn't call OpenSSL_add

Re: TLS with openssl 0.9.8m

2010-03-22 Thread Richard van den Berg
On 15-3-10 16:49 , Quanah Gibson-Mount wrote: We use self-signed certs with Postfix, and StartTLS on port 25 works just fine. Postfix is linked against OpenSSL 0.9.8m for us. Is the signature algorithm of your cert sha256WithRSAEncryption ? It looks like there is a bug in postfix where th

Re: TLS with openssl 0.9.8m

2010-03-15 Thread Victor Duchovni
On Sun, Mar 14, 2010 at 04:34:41PM +0100, Richard van den Berg wrote: > Mar 14 08:47:04 majoron postfix/smtpd[31776]: SSL_accept:error in SSLv3 > read client certificate A Various SMTP clients are known to mis-handle requests for client certificates. You have not posted your "postconf -n" outpu

Re: TLS with openssl 0.9.8m

2010-03-15 Thread mouss
Richard van den Berg a écrit : > Is anyone here successfully using self signed server certificates in > combination with openssl 0.9.8m ? I just upgraded from 0.9.8k and I am > getting these errors whenever a starttls is received: > works on FreeBSD: $ uname FreeBSD $ postconf mail_version mail_v

Re: TLS with openssl 0.9.8m

2010-03-15 Thread Quanah Gibson-Mount
--On Sunday, March 14, 2010 4:34 PM +0100 Richard van den Berg wrote: Is anyone here successfully using self signed server certificates in combination with openssl 0.9.8m ? I just upgraded from 0.9.8k and I am getting these errors whenever a starttls is received: This is all over port 25 with