Re: [exim] Problem with iPhone and Exim

Am 25.02.2020 14:44, schrieb Jeremy Harris via Exim-users:

The main server uses Exim 4.89 from Debian Stretch paket, so I can't
update it right now...
The server with 4.92.3 is my private server (with Exim compiled). But
the problem must be solved on the server with 4.89 as primary target...

> 4.92.3 with -d+all ? Also, what version of GnuTLS

15:42:24 13597 Connection request from 10.0.56.135 port 51649
15:42:24 13597 interface address=10.0.46.11 port=8465
15:42:24 13597 search_tidyup called
15:42:24 13597 1 SMTP accept process running
15:42:24 13597 Listening...
15:42:24 13686 sender_fullhost = [10.0.56.135]
15:42:24 13686 sender_rcvhost = [10.0.56.135]
15:42:24 13686 Process 13686 is handling incoming connection from
[10.0.56.135]
15:42:24 13686 host in host_lookup? no (matched "!*")
15:42:24 13686 set_process_info: 13686 handling incoming connection from
[10.0.56.135] I=[10.0.46.11]:465
15:42:24 13686 host in host_reject_connection? no (option unset)
15:42:24 13686 host in sender_unqualified_hosts? no (option unset)
15:42:24 13686 host in recipient_unqualified_hosts? no (option unset)
15:42:24 13686 host in helo_verify_hosts? no (option unset)
15:42:24 13686 host in helo_try_verify_hosts? no (option unset)
15:42:24 13686 host in helo_accept_junk_hosts? yes (matched "*")
15:42:24 13686 host in hosts_proxy? no (end of list)
15:42:24 13686 initialising GnuTLS as a server
15:42:24 13686 GnuTLS global init required.
15:42:24 13686 initialising GnuTLS server session
15:42:24 13686 Expanding various TLS configuration options for session
credentials.
15:42:24 13686 certificate file = /path/to/my/cert.crt
15:42:24 13686 key file = /path/to/my/key.pem
15:42:24 13686 TLS: cert/key registered
15:42:24 13686 Added 154 certificate authorities.
15:42:24 13686 Initialising GnuTLS server params.
15:42:24 13686 Loading default hard-coded DH params
15:42:24 13686 Loaded fixed standard D-H parameters
15:42:24 13686 GnuTLS session cipher/priority "NORMAL:!VERS-SSL3.0"
15:42:24 13686 host in tls_verify_hosts? no (option unset)
15:42:24 13686 host in tls_try_verify_hosts? no (option unset)
15:42:24 13686 TLS: a client certificate will not be requested.
15:43:02 13686 LOG: MAIN
15:43:02 13686 TLS error on connection from [10.0.56.135]
I=[10.0.46.11]:465 (gnutls_handshake): Error in the pull function.
15:43:03 13686 search_tidyup called
15:43:03 13597 child 13686 ended: status=0x0
15:43:03 13597 normal exit, 0
15:43:03 13597 0 SMTP accept processes now running
15:43:03 13597 Listening...

GnuTLS 3.5.8-5+deb9u4 from Debian paket

> ("exim -d -bV" will give that, among a lot of other stuff)?

exim4 -bV says:

Exim version 4.89 #1 built 03-Sep-2019 18:01:38
Copyright (c) University of Cambridge, 1995 - 2017
(c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007
- 2017
Berkeley DB: Berkeley DB 5.3.28: (September 9, 2013)
Support for: crypteq iconv() IPv6 PAM Perl Expand_dlfunc GnuTLS
move_frozen_messages Content_Scanning DKIM DNSSEC Event OCSP PRDR PROXY
SOCKS TCP_Fast_Open
Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch cdb dbm
dbmjz dbmnz dnsdb dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql
sqlite
Authenticators: cram_md5 cyrus_sasl dovecot plaintext spa tls
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram
redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Fixed never_users: 0
Configure owner: 0:0
Size of off_t: 8
Configuration file is /etc/exim4/exim4.conf

Thanks
Luca Bertoncello
(lucabert@???)