Author: Olef van de Stadt Date: To: exim-users Subject: [exim] Strange TLS error
The following failure occurs when I run exim in debug mode:
1796 SMTP<< STARTTLS
1796 tls_certificate file /root/Certificates/Mail/mail.crt
1796 tls_privatekey file /root/Certificates/Mail/mail.key
1796 Initialized TLS
1796 host in tls_verify_hosts? no (option unset)
1796 host in tls_try_verify_hosts? no (option unset)
1796 SMTP>> 220 TLS go ahead
1796 Calling SSL_accept
1796 LOG: MAIN
1796 TLS error on connection from XXXXX (XXXXX) [XXXXXXX] (SSL_accept):
not in error state
1796 TLS failed to start
1796 SMTP<< ^A^C^A?x???^P??:??9??8??5??^V??^S??
1796 SMTP>> 554 Security failure
1796 LOG: smtp_connection MAIN
The "not in error state" thing concerns me, so I dug up the SSL manual
pages and changed a bit of code to add SSL_get_error(ssl, rc) to the log
line and I get (Note, this change was made around line 700 in
src/tls-openssl.c):
2007-05-01 13:11:23 TLS error on connection from XXXXX (XXXXX) [XXXXX]
(SSL_accept): not in error state [111]
Now the fun part, I cant seem to find any reference to errno '111' in the
manual pages, and why does ERR_get_error() return there is no error ?
