Author: Holden Rohrer Date: To: Jeremy Harris via Exim-users Subject: Re: [exim] Delay on exim send increases with uptime
> Show us the actual logs
I think someone's been trying to spam the server for some reason, and I mistook
Google's server's IP for theirs. It was not, and I was getting an SSL verify
error because of misconfigured local certificates. I tried to check if this was
an exim problem with openssl on the server, and it returned an error about
being unable to verify because it was "unable to get local issuer certificate."
Exim is showing a similar error in the following logs created after I sent a few test email>s: >2020-01-31 00:49:11 1ixKUh-0002AG-3H <= hr@??? H=c-24-98-121-158.hsd1.ga.comcast.net (bruh-moment.localdomain) [24.98.121.158] P=esmtpsa X=TLS1.3:TLS_AES_256_GCM_SHA384:256 CV=no A=PLAIN:hr S=568
>id=20200131004903.GA40254@???
>2020-01-31 00:52:23 1ixKUh-0002AG-3H [172.217.197.27] SSL verify error: depth=1 error=unable to get local issuer certificate cert=/C=US/O=Google Trust Services/CN=GTS CA 1O1
>2020-01-31 00:52:25 1ixKUh-0002AG-3H => holden.rohrer@??? R=dnslookup T=remote_smtp H=gmail-smtp-in.l.google.com [172.217.197.27] TFO X=TLS1.3:TLS_AES_256_GCM_SHA384:256 CV=no K C="250 2.0.0 OK 78si5659444qkj.181 - gsmtp"
>2020-01-31 00:52:25 1ixKUh-0002AG-3H Completed
>2020-01-31 00:52:45 1ixKY9-0002AQ-4Z <= hr@??? H=c-24-98-121-158.hsd1.ga.comcast.net (bruh-moment.localdomain) [24.98.121.158] P=esmtpsa X=TLS1.3:TLS_AES_256_GCM_SHA384:256 CV=no A=PLAIN:hr S=568
>id=20200131005241.GB40254@???
>2020-01-31 00:53:39 1ixKZ1-0002C4-GZ <= hr@??? H=c-24-98-121-158.hsd1.ga.comcast.net (bruh-moment.localdomain) [24.98.121.158] P=esmtpsa X=TLS1.3:TLS_AES_256_GCM_SHA384:256 CV=no A=PLAIN:hr S=568
>id=20200131005338.GA42122@???
>2020-01-31 00:55:28 SMTP protocol error in "AUTH LOGIN" H=(167.99.150.116) [185.234.219.74] AUTH command used when not advertised
>2020-01-31 00:55:28 Start queue run: pid=8442
>2020-01-31 00:55:28 1ixKY9-0002AQ-4Z Spool file is locked (another
>process is handling this message)
>2020-01-31 00:55:28 1ixKZ1-0002C4-GZ Spool file is locked (another
> process is handling this message)
> 2020-01-31 00:55:28 End queue run: pid=8442
> 2020-01-31 00:55:56 1ixKY9-0002AQ-4Z [172.217.197.26] SSL verify error: depth=1 error=unable to get local issuer certificate cert=/C=US/O=Google Trust Services/CN=GTS CA 1O1
> 2020-01-31 00:55:57 1ixKY9-0002AQ-4Z => holden.rohrer@??? R=dnslookup T=remote_smtp H=gmail-smtp-in.l.google.com [172.217.197.26] TFO X=TLS1.3:TLS_AES_256_GCM_SHA384:256 CV=no K C="250 2.0.0 OK d21si5271786qtg.277 - gsmtp"
> 2020-01-31 00:55:57 1ixKY9-0002AQ-4Z Completed
> 2020-01-31 00:56:51 1ixKZ1-0002C4-GZ [172.217.197.26] SSL verify error: depth=1 error=unable to get local issuer certificate cert=/C=US/O=Google Trust Services/CN=GTS CA 1O1
> 2020-01-31 00:56:51 1ixKZ1-0002C4-GZ => holden.rohrer@??? R=dnslookup T=remote_smtp H=gmail-smtp-in.l.google.com [172.217.197.26] TFO X=TLS1.3:TLS_AES_256_GCM_SHA384:256 CV=no K C="250 2.0.0 OK s11si5263723qtj.362 - gsmtp"
> 2020-01-31 00:56:51 1ixKZ1-0002C4-GZ Completed
This might not be an Exim issue, but I'm not sure where to start on fixing it,
or why it would change with uptime.
