[exim-dev] [Bug 994] openssl: enable SSL_OP_MICROSOFT_BIG_S…

Top Page
Delete this message
Reply to this message
Author: Simon Arlott
Date:  
To: exim-dev
Subject: [exim-dev] [Bug 994] openssl: enable SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER workaround
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=994




--- Comment #3 from Simon Arlott <bugzilla.exim.simon@???> 2010-06-05 10:55:45 ---
(In reply to comment #2)
> I've committed code which adds an "openssl_options" main configuration option.
>
> You might try:
> openssl_options +microsoft_big_sslv3_buffer
> with an Exim built from HEAD and let me know how you get on. Feel free to
> reopen this bug.
>


With default openssl_options:
2010-06-05 10:50:04 SMTP connection from [212.183.140.57]:38642 (TCP/IP
connection count = 1)
2010-06-05 10:50:05 ident connection to 212.183.140.57 timed out
2010-06-05 10:50:05 no host name found for IP address 212.183.140.57
2010-06-05 10:50:18 TLS error (SSL_read): error:1408F0C6:SSL
routines:SSL3_GET_RECORD:packet length too long
2010-06-05 10:50:18 SMTP connection from (Moto-A760) [212.183.140.57]:38642
lost while reading message data (header)

With openssl_options = -dont_insert_empty_fragments
+microsoft_big_sslv3_buffer:
2010-06-05 10:52:05 SMTP connection from [212.183.140.28]:36087 (TCP/IP
connection count = 1)
2010-06-05 10:52:06 ident connection to 212.183.140.28 timed out
2010-06-05 10:52:06 no host name found for IP address 212.183.140.28
2010-06-05 10:54:06 1OKq3D-0003sG-4W no IP address found for host Moto-A760
2010-06-05 10:54:08 1OKq3D-0003sG-4W Not-Spam: 1.4 < 2.0 [ALL_TRUSTED -1.4,
MIME_BASE64_TEXT 2.8]
2010-06-05 10:54:08 1OKq3D-0003sG-4W <= phone H=(Moto-A760)
[212.183.140.28]:36087 P=esmtpsa X=SSLv3:EXP-RC4-MD5:128 A=login S=278340
2010-06-05 10:54:09 1OKq3D-0003sG-4W => simon R=local T=mailbox S=278445
QT=1m46s DT=1s
2010-06-05 10:54:09 1OKq3D-0003sG-4W Completed QT=1m46s
2010-06-05 10:54:09 SMTP connection from (Moto-A760) [212.183.140.28]:36087
closed by QUIT


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email