Re: [exim] TLS error on connection from...

Top Page
Delete this message
Reply to this message
Author: Mario Emmenlauer
Date:  
To: exim-users
Subject: Re: [exim] TLS error on connection from...

Hey Elrippo,

On 14.04.2015 12:23, Elrippo wrote:
> Create a new self signed certificate, then it will work again


Thanks soo much! It works, looks good! I will do further testing,
but if you don't hear back from me then its all fine.

On a side note, was this somehow visible from the logs or somewhere?
I would have never found this without you...

Thanks a lot again, and all the best,

    Mario




> Am 14. April 2015 11:08:51 MESZ, schrieb Mario Emmenlauer <mario@???>:
>
>
>     Hello,

>
>     I've recently upgraded to Ubuntu 14.04, and now exim does not
>     accept emails from hotmail, gmail and some other services anymore.
>     The error I get is typically something like:
>     ... TLS error on connection from bay004-omc2s25.hotmail.com <http://bay004-omc2s25.hotmail.com> [65.54.190.100 <http://65.54.190.100>]
>     (gnutls_handshake): Could not negotiate a supported cipher suite.

>
>     With lots of searching I found various leads(*) that indicate that I
>     must set tls_require_ciphers to allow TLS v1.0 and v1.1. However no
>     success with all my tries so far :-( I tried to set
>     tls_require_ciphers = NORMAL:+VERS-TLS1.2:+VERS-TLS1.1:+VERS-TLS1.0:%COMPAT
>     in conf.d/main/03_exim4-config_tlsoptions but the error persits. I've
>     tried sslscan with and without my tls_require_ciphers, but it shows
>     no difference? I'm a bit new to exim, can you please advise explicitly
>     what to do
>     (attached my merged config) and/or how to even test this?

>
>     Thanks a lot,

>
>         Mario

>
>
>
>     The best so far was:
>     (*) https://lists.exim.org/lurker/message/20141103.181337.b32d29e3.de.html

>
>
>
>
>
> --


-- 
Mario Emmenlauer BioDataAnalysis             Mobil: +49-(0)151-68108489
Balanstrasse 43                    mailto: mario.emmenlauer * unibas.ch
D-81669 München                          http://www.biodataanalysis.de/