Author: jwexler Date: To: Exim-users Subject: [exim] Outlook failing gnutls_handshake after resetting up on
ubuntu 9.10
I have been googling for three days now to no avail.
I have just reconfigured relevant email settings (exim4, mailscanner,
clamav, saslauthd, ldap, samba, dovecot, ssl, ca-certificates, .crt and .pem
files) on ubuntu 9.10 by updating the current version of each's settings
files with my customizations that I had made on Ubuntu 8.04 LTS.
I am able to receive email fine but can no longer send. My configuration
requires TLS over port 587.
Please note again that the customizations, certificates, etc are those that
worked on 8.04 LTS.
Outlook 2007 produces the following error (not exact wording):
Sending of test email message: does not support the encryption type supplied
by the server. Please change the encryption method. Contact your
administrator...
And in the mainlog:
SMTP connection from [123.123.123.123]:1185 I=[123.123.123.124]:587 (TCP/IP
connection count = 1)
2010-04-30 16:05:21 [2808] no host name found for IP address 123.123.123.123
2010-04-30 16:05:22 [2808] TLS error on connection from (mycomp)
[123.123.123.123]:1185 (gnutls_handshake): A TLS packet with
unexpected length was received.
2010-04-30 16:05:22 [2808] SMTP connection from (mycomp)
[123.123.123.123]:1185 I=[123.123.123.124]:587 closed by EOF
2010-04-30 16:05:22 [2808] no MAIL in SMTP connection from (mycomp)
[123.123.123.123]:1185 I=[123.123.123.124]:587 D=6s C=EHLO,STARTTLS
I did the following test:
I first used the keys that include my public hostname (i.e., the ones that I
have been using all along on Ubuntu 8.04LTS).
- The hostname in the certificate does NOT match '127.0.0.1'
So, I then generated a new exim.crt and exim.key using exim-gencert and
configured exim to use those (just for this following test) and set the CN
to 127.0.0.1
Then did gnutls-cli -p 587 127.0.0.1 again and this time a connected with a
successful gnutls_handshake.
I tried using various values for the CN in subsequent exim.crt and exim.keys
but still get the same error message in Outlook.
Were there any changes between 8.04 LTS and 9.10 that would cause this
behavior Any ideas?