Re: [exim] TLS error in incoming emails from *.outlook.com

On 07/02/18 18:25, Ian Zimmerman wrote:
>> 2017-11-27 13:22:55
>> TLS error on connection from mail-oln040092070016.outbound.protection.outlook.com (EUR03-AM5-obe.outbound.protection.outlook.com) [40.92.70.16] (send): The specified session has been invalidated for some reason.
>> 2017-11-27 13:23:46
>> 1eJILV-0001Gg-K3 TLS error on connection from mail-oln040092071027.outbound.protection.outlook.com (EUR03-DB5-obe.outbound.protection.outlook.com) [40.92.71.27] (recv): Error in the pull function.
>
> FWIW, I see this as well on debian stretch, exim4 package version 4.89-2+deb9u2.

"error in the pull function" is an amazingly helpful error
from GnuTLS that seems to most often mean "the remote closed
the TCP connection". Why, it doesn't say - but it could be that
the initial TLS conversation failed.... or not. If you could capture
one with exim debug "tls" it would help; note that you can selectively
enable debug using an ACL control.
--
Cheers,
Jeremy