[Exim] Re: closed connection in response to STARTTLS.

preisig@??? said:
> I have problem: exim4 built with tls support does not send any mail
> to one host: Remote host palmolive.yandex.ru [213.180.193.106] closed
> connection in response to STARTTLS

Are you sure it's not sending any messages at all? Or does it send only one
message per connection attempt?

I've just observed Exim 3.35 reporting the same error - but only after
delivering one message. Prior to attempting to send the second message,
Exim sends 'STARTTLS' again, and the receiving server immediately
disconnects.

It looks like we're trying to take down the TLS session and restart it for
each message - Postfix evidently doesn't seem to like this. Is it permitted?

A selection of the result of 'exim -d9 -M <msgid>' (remainder available on
request) ...

phoenix /root # egrep SMTP\|SSL\|tls debuglog
SMTP<< 220 dell-paw-2.cambridge.redhat.com ESMTP Postfix
SMTP>> EHLO phoenix.infradead.org
SMTP<< 250-dell-paw-2.cambridge.redhat.com
SMTP>> STARTTLS
SMTP<< 220 Ready to start TLS
Initialised TLS (OpenSSL/0.9.6beta)
SSL info: before/connect initialization
SSL info: before/connect initialization
SSL info: SSLv2/v3 write client hello A
SSL info: SSLv3 read server hello A
SSL info: SSLv3 read server certificate A
SSL info: SSLv3 read server key exchange A
SSL info: SSLv3 read server certificate request A
SSL info: SSLv3 read server done A
SSL info: SSLv3 write client certificate A
SSL info: SSLv3 write client key exchange A
SSL info: SSLv3 write change cipher spec A
SSL info: SSLv3 write finished A
SSL info: SSLv3 flush data
SSL info: SSLv3 read finished A
SSL info: SSL negotiation finished successfully
SSL info: SSL negotiation finished successfully
SMTP>> EHLO phoenix.infradead.org
tls_do_write(bfffc530, 28)
SSL_write(SSL, bfffc530, 28)
Calling SSL_read(80dee98, bfffc930, 4095)
SMTP<< 250-dell-paw-2.cambridge.redhat.com
SMTP>> MAIL FROM:<linux-arm-kernel-admin@???> SIZE=6769
SMTP>> RCPT TO:<dwmw2@???>
SMTP>> DATA
tls_do_write(bfffc530, 105)
SSL_write(SSL, bfffc530, 105)
Calling SSL_read(80dee98, bfffc930, 4095)
SMTP<< 250 Ok
SMTP<< 250 Ok
SMTP<< 354 End data with <CR><LF>.<CR><LF>
SMTP>> writing message and terminating "."
tls_do_write(80d2bc0, 5749)
SSL_write(SSL, 80d2bc0, 5749)
Calling SSL_read(80dee98, bfffc930, 4095)
SMTP<< 250 Ok: queued as 0B6AE2B547
tls_close(): shutting down SSL
SSL info: SSL negotiation finished successfully
=> dwmw2@??? <dwmw2@???> R=lookuphost T=remote_smtp H=smtp.cambridge.redhat.com [195.224.55.226] X=TLSv1:EDH-RSA-DES-CBC3-SHA:168 DN="/C=UK/ST=Cambridgeshire/L=Cambridge/O=Red Hat (UK) Ltd/OU=Red Hat Cambridge SMTP/CN=smtp.cambridge.redhat.com/Email=sysadmin@???" C="250 Ok: queued as 0B6AE2B547"
SMTP>> STARTTLS
SMTP<<
Malformed SMTP response from smtp.cambridge.redhat.com [195.224.55.226] after STARTTLS: \025\003\001
== dwmw2@??? <dwmw2@???> T=remote_smtp defer (-20): Malformed SMTP response from smtp.cambridge.redhat.com [195.224.55.226] after STARTTLS: \025\003\001
error -20 77: Malformed SMTP response from smtp.cambridge.redhat.com [195.224.55.226] after STARTTLS: \025\003\001

--
dwmw2