[exim-dev] [Bug 1381] simple LDAP lookups fails with TLS

Top Page
Delete this message
Reply to this message
Author: alxgomz
Date:  
To: exim-dev
Subject: [exim-dev] [Bug 1381] simple LDAP lookups fails with TLS
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=1381




--- Comment #6 from alxgomz <alxgomz@???> 2013-09-08 18:28:00 ---
I have reproduced the test case with Exim 4.80.1 compiled from source. Same
problem.

I just noticed that when using ldap:// bindings with startTLS (as opposed to
ldaps://), Exim sends a TLS alert "Version Protocol" and then closes the
connection (frames 50 and 51 of "StartTLS ldap:// lookup" attachment.

This is quite weird as both client and server support TLS1.2 and this is also
the chosen version in the TLS Server Hello.

I am not an SSL/TLS expert at all, but I would expect a protocol versio
mismatch to make the ssl handshake fail earlier than it actually does here.
both "cipher change" and "finished" message are sent byb both client and server
(client_cipher_change in frame 38, client_finished in frame 39, and
server_cipher_change and server_finished in frame 41)


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email