[exim] Re: Follow-Up: Debug TLS/DANE problems it is GnuTLS!

Top Pagina
Delete this message
Reply to this message
Auteur: Jeremy Harris
Datum:  
Aan: exim-users
Onderwerp: [exim] Re: Follow-Up: Debug TLS/DANE problems it is GnuTLS!
On 07/07/2024 17:34, Wolfgang via Exim-users wrote:
> doing so I was able to catch the GnuTLS failing connection:
> ======================================================================
>
> 17:46:01 1566 85.215.77.84 in hosts_require_ocsp? no (option unset)
> 17:46:01 1566 85.215.77.84 in hosts_request_ocsp? yes (matched "*")
> 17:46:01 1566 initialising GnuTLS as a client on fd 6


As Viktor says, there is no evidence there of any attempt to use DANE.
Unfortunately, you trimmed away the debug for the full sequence of
DNS lookups (and transport driver options) leading up to this point.

This make it hard to diagnose.
Show us everything from the start of the last router.
It will start something like:

     11:45:00 17652 routing t4@???
     11:45:00 17652 --------> client router <--------


--
Cheers,
Jeremy


--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/