Gaye Abdoulaye writes:
Jerry Amundson a écrit :
On 6/27/07, Jerry Amundson <jamu...@gmail.com> wrote:
On 6/27/07, Sam Varshavchik <mrs...@courier-mta.com> wrote:
Try setting TLS_PROTOCOL=TLS1 in esmtpd-ssl.
I'm not using esmtpd-ssl, but it didn't matter either way....
[root@STProuter courier]# grep '^[TC][OL][SU][_R][PI]' {esmtpd,esmtpd-ssl}
esmtpd:COURIERTLS=/usr/lib/courier/bin/couriertls
esmtpd:TLS_PROTOCOL=TLS1
esmtpd-ssl:COURIERTLS=/usr/lib/courier/bin/couriertls
esmtpd-ssl:TLS_PROTOCOL=TLS1
[root@STProuter courier]# service courier restart
Stopping Courier mail server: esmtpd-ssl esmtpd-msa esmtpd courierd
courierfilter
Starting Courier mail server: courierfilter courierd esmtpd
[root@STProuter courier]# tail -f /var/log/maillog
[snip]
Jun 27 22:51:26 localhost courieresmtpd: courieresmtpd: STARTTLS
failed: couriertls: accept: error:1408F10B:SSL
routines:SSL3_GET_RECORD:wrong version number
FWIW, the 0.55.1 rpm's also work fine when rebuilt - just 0.56.0 has
the problem.
I still have the same problem too
The only related change in that area is that SSL2 is no longer accepted as a
fallback for SSL3. If you want to use SSL2, you must explicitly set either
TLS_PROTOCOL or SSL_PROTOCOL, accordingly.
Play with TLS_PROTOCOL (for STARTTLS), and SSL_PROTOCOL (for esmtp over
SSL), and try different values for each.