Hi,

I am using Bill's toaster and found on one of my debian servers that after an upgrade to openssl-0.9.8e I stopped received mail. I checked the logs of sending mail servers and found stuff like:

deferral: TLS_connect_failed:_error:14077410:SSL_routines:SSL23_GET_SERVER_HELLO:sslv3_alert_handshake_failure;_connected_to_1.2.3.4

Quick googling brought me to this:
http://www.thegillis.net/content/view/41/31/

and I found that the solution suggested works with this setup too. You just:

--- netqmail-1.05-orig/qmail-smtpd.c    Fri Apr  6 18:08:05 2007
+++ netqmail-1.05/qmail-smtpd.c Sat Apr  7 09:04:21 2007
@@ -1173,7 +1173,7 @@

  ciphers = env_get("TLSCIPHERS");
  if (!ciphers) {
-    if (control_readfile(&saciphers, "control/tlsserverciphers") == -1)
+    if (control_readfile(&saciphers, "control/tlsserverciphers", 0) == -1)
      { SSL_free(myssl); die_control(); }
    if (saciphers.len) { /* convert all '\0's except the last one to ':' */
      int i;


http://www.thegillis.net/examples/qmail/netqmail-fix.patch

Regards,
Maciej Soltysiak


Reply via email to