Re: [exim] [Exim] Exim4 trying to talk to GMAIL

Página Inicial
Delete this message
Reply to this message
Autor: Phil Pennock
Data:  
Para: Mark Fletcher
CC: exim-users
Assunto: Re: [exim] [Exim] Exim4 trying to talk to GMAIL
On 2007-11-11 at 00:58 +0900, Mark Fletcher wrote:
> >
> > hosts_require_tls = *.google.com
>
> Yeah, the log file said something about that -- unfortunately I couldn't
> find in the readme where that hosts_require_tls should be set and a
> Fletcher classic find / grep combination of the exim-relevant
> directories I know about failed to turn up which file this setting needs
> to be in. Could you enlighten me?


Judging by the Debian system I just logged into:
/usr/share/doc/exim4/spec.txt.gz

Answer: on the smtp transport.

Eg:
smarthost_smtp:
driver = smtp
port = 587
hosts_require_tls = *
hosts_require_auth = *

which is roughly what my smtp transport on the laptop boils down to for
Gmail, after all the string-expansions I have.

> Any other ideas?


$ f=your@???
$ t=recipient@???
$ printf "From: $f\nTo: $t\nSubject: test\n\nfoo" | exim -d+all $t \
    2>&1 | tee exim.output.log


After a line containing:
>>>>>>>>>>>>>>>> Remote deliveries >>>>>>>>>>>>>>>>

you should have full debug trace data, including SSL data; Exim
registers a trace callback with OpenSSL which will log all the OpenSSL
trace data to the "tls" selector (so -d+tls is sufficient to get it,
instead of -d+all).

Eg, I see this, modulo EHLO and IP address munging:
12:15:18  8394   SMTP>> EHLO XXX-something-else-here-XXX
12:15:18  8394 waiting for data on socket
12:15:18  8394 read response data: size=125
12:15:18  8394   SMTP<< 250-mx.google.com at your service, [192.0.2.1]
12:15:18  8394          250-SIZE 28311552
12:15:18  8394          250-8BITMIME
12:15:18  8394          250-STARTTLS
12:15:18  8394          250 ENHANCEDSTATUSCODES
12:15:18  8394 209.85.147.111 in hosts_avoid_tls? no (option unset)
12:15:18  8394   SMTP>> STARTTLS
12:15:18  8394 waiting for data on socket
12:15:18  8394 read response data: size=30
12:15:18  8394   SMTP<< 220 2.0.0 Ready to start TLS
12:15:18  8394 Initialized TLS
12:15:18  8394 Calling SSL_connect
12:15:18  8394 SSL info: before/connect initialization
12:15:18  8394 SSL info: before/connect initialization
12:15:18  8394 SSL info: SSLv2/v3 write client hello A
12:15:18  8394 SSL info: SSLv3 read server hello A
12:15:18  8394 SSL info: SSLv3 read server certificate A
12:15:18  8394 SSL info: SSLv3 read server done A
12:15:18  8394 SSL info: SSLv3 write client key exchange A
12:15:18  8394 SSL info: SSLv3 write change cipher spec A
12:15:18  8394 SSL info: SSLv3 write finished A
12:15:18  8394 SSL info: SSLv3 flush data
12:15:18  8394 SSL info: SSLv3 read finished A
12:15:18  8394 SSL info: SSL negotiation finished successfully
12:15:18  8394 SSL info: SSL negotiation finished successfully
12:15:18  8394 SSL_connect succeeded
12:15:18  8394 Cipher: TLSv1:DES-CBC3-SHA:168
12:15:18  8394   SMTP>> EHLO XXX-something-else-here-XXX
12:15:18  8394 tls_do_write(bfffc813, 34)
12:15:18  8394 SSL_write(SSL, bfffc813, 34)
12:15:18  8394 outbytes=34 error=0
12:15:18  8394 waiting for data on socket
12:15:18  8394 Calling SSL_read(608e40, bfffcc13, 4096)
12:15:18  8394 read response data: size=133
12:15:18  8394   SMTP<< 250-mx.google.com at your service, [192.0.2.1]
12:15:18  8394          250-SIZE 28311552
12:15:18  8394          250-8BITMIME
12:15:18  8394          250-AUTH LOGIN PLAIN
12:15:18  8394          250 ENHANCEDSTATUSCODES


Regards,
-Phil