[exim] TLS and Postini

Top Page
Delete this message
Reply to this message
Author: Matt Soccio
Date:  
To: exim-users
Subject: [exim] TLS and Postini
Hi,

I noticed that several valid mails were being frozen today, and the
common denominator is that they are all domains being filtered by Postini.

The frozen messages were all accompanied by these logs:
smtp transport process returned non-zero status 0x000b: terminated by
signal 11

I have a debian stable box with Andreas' exim-daemon-heavy-4.34 and
gnutls backports. After reading some previous posts, I found a backport
for libgnutls11 and installed the latest exim debs compiled against the
newer gnutls libraries that are supposed to fix the gnutls/openssl
handshake issues.

Now I get "A TLS packet with unexpected length was received" errors when
I try to flush these emails out of the queue.

Using gnutls-cli:

phoenix:~# gnutls-cli -d 4 -p 25 -s 64.18.5.10
Connecting to '64.18.5.10:25'...

- Simple Client Mode:

220 Postini ESMTP 117 y5_2_0c3 ready. CA Business and Professions Code
Section 17538.45 forbids use of this system for unsolicited electronic
mail advertisements.
ehlo phoenix.astro.psu.edu
250-Postini says hello back
250-STARTTLS
250-8BITMIME
250 HELP
starttls
220 Go ahead
mail from:<soccio@???>
*** Non fatal error: (unknown error code)
- Peer has closed the GNUTLS connection

Emails to the same addresses were flowing fine last week, and I have
tried reverting to older exim/libgnutls10/libssl packages, but I still
can't negotiate this TLS session. Does anyone have any suggestions to
get around this, or is compiling 4.4 against openssl my best bet?

Thanks

Matt