Re: [exim] TLS error on connection

Top Page
Delete this message
Reply to this message
Author: Evgeniy Berdnikov
Date:  
To: exim-users
Subject: Re: [exim] TLS error on connection
On Thu, Aug 27, 2015 at 02:44:40PM +0000, Viktor Dukhovni wrote:
> I just tried:
>
>     $ posttls-finger ringways.co.uk
>     posttls-finger: Connected to mail.ringways.co.uk[88.211.105.31]:25

...
>     posttls-finger: < 220 TLS go ahead
>     posttls-finger: SSL_connect error to mail.ringways.co.uk[88.211.105.31]:25: Connection timed out

>
> Are you using /dev/random, rather than /dev/urandom for entropy?


I tried "openssl s_client -connect mail.ringways.co.uk:25 -starttls smtp"
with -tls1_1 and -tls1_2 options. The first option leads to very quick
connect, tls handhaske and server prompt, the second leads to hangup
after ClientHello.

I don't know whether the difference between TLS protocol versions is
related to usage of kernel random/urandom interfaces by crypto libs.
--
Eugene Berdnikov