Re: [exim] TLS verify

Top Page
Delete this message
Reply to this message
Author: Viktor Dukhovni
Date:  
To: exim-users
Subject: Re: [exim] TLS verify
On Mon, Aug 03, 2015 at 03:37:15PM +0100, Always Learning wrote:

> 2015-08-01 16:38:58 TLS error on connection from flan.grepular.com
> [198.211.125.252]:38235 (SSL_accept): error:14094418:SSL
> routines:SSL3_READ_BYTES:tlsv1 alert unknown ca: 1 Time(s)


Consistent with the OPs report, his Exim SMTP client is terminating
the SSL handshake when the peer's certificate fails to verify (in
this case sending a fatal 'unknown ca' alert).

So something in the OPs configuration seems to be making TLS
authentication mandatory for various peers.

-- 
    Vikor.