Re: [exim] TLS error on connection from...

Hi Mario,

Did you have an answer to your question about how it was visible ?

Regards

nb


14 avril 2015 14:22 "Mario Emmenlauer" <mario@???> a écrit:
> Hey Elrippo,
>
> On 14.04.2015 12:23, Elrippo wrote:
>
>> Create a new self signed certificate, then it will work again
>
> Thanks soo much! It works, looks good! I will do further testing,
> but if you don't hear back from me then its all fine.
>
> On a side note, was this somehow visible from the logs or somewhere?
> I would have never found this without you...
>
> Thanks a lot again, and all the best,
>
> Mario
>
>> Am 14. April 2015 11:08:51 MESZ, schrieb Mario Emmenlauer <mario@???>:
>>
>> Hello,
>>
>> I've recently upgraded to Ubuntu 14.04, and now exim does not
>> accept emails from hotmail, gmail and some other services anymore.
>> The error I get is typically something like:
>> ... TLS error on connection from bay004-omc2s25.hotmail.com <http://bay004-omc2s25.hotmail.com>
>> [65.54.190.100 <http://65.54.190.100>]
>> (gnutls_handshake): Could not negotiate a supported cipher suite.
>>
>> With lots of searching I found various leads(*) that indicate that I
>> must set tls_require_ciphers to allow TLS v1.0 and v1.1. However no
>> success with all my tries so far :-( I tried to set
>> tls_require_ciphers = NORMAL:+VERS-TLS1.2:+VERS-TLS1.1:+VERS-TLS1.0:%COMPAT
>> in conf.d/main/03_exim4-config_tlsoptions but the error persits. I've
>> tried sslscan with and without my tls_require_ciphers, but it shows
>> no difference? I'm a bit new to exim, can you please advise explicitly
>> what to do
>> (attached my merged config) and/or how to even test this?
>>
>> Thanks a lot,
>>
>> Mario
>>
>> The best so far was:
>> (*) https://lists.exim.org/lurker/message/20141103.181337.b32d29e3.de.html
>>
>> --
>
> --
> Mario Emmenlauer BioDataAnalysis Mobil: +49-(0)151-68108489
> Balanstrasse 43 mailto: mario.emmenlauer * unibas.ch
> D-81669 München http://www.biodataanalysis.de
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org
> ## Please use the Wiki with this list - http://wiki.exim.org