atom feed29 messages in net.sourceforge.lists.courier-usersRe: [courier-users] courieresmtp - "N...
FromSent OnAttachments
Lindsay HaisleyDec 5, 2008 1:57 pm 
Sam VarshavchikDec 5, 2008 3:35 pm 
Lindsay HaisleyDec 5, 2008 8:18 pm 
Lindsay HaisleyDec 5, 2008 8:57 pm 
Sam VarshavchikDec 6, 2008 5:25 am 
Gordon MessmerDec 6, 2008 7:38 am 
Lindsay HaisleyDec 6, 2008 10:55 am 
Lindsay HaisleyDec 6, 2008 11:59 am 
Lindsay HaisleyDec 6, 2008 12:20 pm 
Gordon MessmerDec 6, 2008 12:23 pm 
Gordon MessmerDec 6, 2008 12:41 pm 
Lindsay HaisleyDec 6, 2008 12:41 pm 
Lindsay HaisleyDec 6, 2008 1:12 pm 
Gordon MessmerDec 6, 2008 1:31 pm 
Lindsay HaisleyDec 6, 2008 2:31 pm 
Sam VarshavchikDec 6, 2008 2:41 pm 
Sam VarshavchikDec 6, 2008 2:43 pm 
Lindsay HaisleyDec 6, 2008 2:58 pm 
Lindsay HaisleyDec 6, 2008 3:08 pm 
Sam VarshavchikDec 6, 2008 3:29 pm 
Lindsay HaisleyDec 6, 2008 3:47 pm 
Sam VarshavchikDec 6, 2008 5:27 pm 
Lindsay HaisleyDec 6, 2008 6:04 pm 
Sam VarshavchikDec 6, 2008 7:05 pm 
Lindsay HaisleyDec 6, 2008 10:00 pm 
Lindsay HaisleyDec 7, 2008 9:09 pm 
Sam VarshavchikDec 8, 2008 8:34 am 
Lindsay HaisleyDec 8, 2008 5:30 pm 
Sam VarshavchikDec 8, 2008 6:40 pm 
Subject:Re: [courier-users] courieresmtp - "No such file or directory"
From:Sam Varshavchik (mrs@courier-mta.com)
Date:Dec 6, 2008 2:41:39 pm
List:net.sourceforge.lists.courier-users

Lindsay Haisley writes:

[pid 5684] open("/etc/ssl/cert.pem", O_RDONLY) = -1 ENOENT (No such file or
directory) [pid 5684] stat("/etc/ssl/certs/c33a80d4.1", 0x7fff935ca8f0) = -1 ENOENT (No
such file or directory)

Since processes frequently iterate through a series of possible locations for needed files, plus many that aren't needed but just checked for, I assume most of these are spurious, and the last one is probably the one that's causing the problem.

Indeed, there is no c33a80d4.1 cert file. I'm not familiar with the details of the TLS mechanism. Is this a file that's expected to be there as a result of the TLS negotiation with the remote server?

Something is happening inside OpenSSL. I think than OpenSSL is trying to find the remote server's certificate authority's certificate.

A lot of SMTP servers use self-signed certs, so certificate verification for SMTP isn't really useful. The default courierd settings have ESMTP_TLS_VERIFY_DOMAIN=0 and TLS_VERIFY_PEER=NONE. This allows TLS to proceed, but disables certificate verification. If you changed these settings in courierd, try reverting to these defaults and see what happens. I'm not actually sure if this is what triggers the error message. ENOENTs, as you've noted, are quite common and ordinary, you need to look for the one that immediately preceded the "No such file or directory". There may be another reason, but confirming that these settings are the default will eliminate that possibility.