Maciej Sołtysiak wrote:
> Hi,
> 
> I am using Bill's toaster and found on one of my debian servers that
> after an upgrade to openssl-0.9.8e
> I stopped received mail. I checked the logs of sending mail servers and
> found stuff like:
> 
> deferral:
> TLS_connect_failed:_error:14077410:SSL_routines:SSL23_GET_SERVER_HELLO:sslv3_alert_handshake_failure;_connected_to_1.2.3.4
> 
> 
> Quick googling brought me to this:
> http://www.thegillis.net/content/view/41/31/
> 
> and I found that the solution suggested works with this setup too. You
> just:
> 
> --- netqmail-1.05-orig/qmail-smtpd.c    Fri Apr  6 18:08:05 2007
> +++ netqmail-1.05/qmail-smtpd.c    Sat Apr  7 09:04:21 2007
> @@ -1173,7 +1173,7 @@
> 
>   ciphers = env_get("TLSCIPHERS");
>   if (!ciphers) {
> -    if (control_readfile(&saciphers, "control/tlsserverciphers") == -1)
> +    if (control_readfile(&saciphers, "control/tlsserverciphers", 0) == -1)
>       { SSL_free(myssl); die_control(); }
>     if (saciphers.len) { /* convert all '\0's except the last one to ':' */
>       int i;
> 
> 
> http://www.thegillis.net/examples/qmail/netqmail-fix.patch
> 


Yes, this was reported to me, and was fixed in 0.9.1 of the
qmail-toaster patch, as well as my smtp-auth/tls cumulative patch.

Regards,

Bill Shupp

Reply via email to