Re: [exim] debugging tls handshake failure

Top Page
Delete this message
Reply to this message
Author: Viktor Dukhovni
Date:  
To: exim-users
Subject: Re: [exim] debugging tls handshake failure
On Mon, Nov 21, 2022 at 09:41:12PM +0000, Julian Bradfield via Exim-users wrote:

> I should like to know what's happening here:
>
> 2022-11-21 21:10:42 TLS error on connection from r218.notifications.rbs.co.uk [130.248.154.218] (gnutls_handshake): A TLS fatal alert has been received.
>


If the server in question is "london.jcbradfield.org", then another
potential issue is a missing intermediate issuer certificate. Your
certificate chain has only the leaf server certificate without the
required "R3" intermediate issuer certificate. If using certbot, use
"fullchain.pem" not "cert.pem" (or the equivalent for a different
setup).

-- 
    Viktor.