Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #225319

Re: ssl handshake problem with bugs.debian.org?

From Sven Hartge <sven@svenhartge.de>
Newsgroups linux.debian.user
Subject Re: ssl handshake problem with bugs.debian.org?
Date 2020-07-27 14:00 +0200
Message-ID <Ax9Xr-5Em-3@gated-at.bofh.it> (permalink)
References <Ax79f-3Vg-1@gated-at.bofh.it> <Ax7iV-4dZ-3@gated-at.bofh.it> <Ax7sB-4hd-5@gated-at.bofh.it> <Ax8ym-4Ty-7@gated-at.bofh.it>
Organization Newsfeed am Wurmloch

Show all headers | View raw


Harald Dunkel <harald.dunkel@aixigo.com> wrote:
> On 2020-07-27 11:17, Sven Hartge wrote:
 
>> Debian uses their own CA to sign this certificate, which is fine for
>> SMTP, which normally only uses opportunistic encryption.
>> 
>> But if the client SMTP-Server is set to *verify* the certificate, it
>> will fail.

> Certificate verification is optional on my MTA. See the log file.
> AFAICT it ignored the failed certificate check and continued with the
> ssl handshake. *Then* it failed.

Right.

> It would be interesting to know whats written in the log files on
> buxtehude. Are there other similar incidents?

Does your MTA present a client certificate? Maybe buxtehude does not
like that?

When diagnosing SSL errors I also find it helpful to wireshark the
connection to see which side exactly triggers the SSL Alert. That may
help highlight the culprit here.

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

ssl handshake problem with bugs.debian.org? Harald Dunkel <harri@afaics.de> - 2020-07-27 11:00 +0200
  Re: ssl handshake problem with bugs.debian.org? Reco <recoverym4n@enotuniq.net> - 2020-07-27 11:10 +0200
    Re: ssl handshake problem with bugs.debian.org? Sven Hartge <sven@svenhartge.de> - 2020-07-27 11:20 +0200
      Re: ssl handshake problem with bugs.debian.org? Harald Dunkel <harald.dunkel@aixigo.com> - 2020-07-27 12:30 +0200
        Re: ssl handshake problem with bugs.debian.org? Sven Hartge <sven@svenhartge.de> - 2020-07-27 14:00 +0200
          Re: ssl handshake problem with bugs.debian.org? Harald Dunkel <harald.dunkel@aixigo.com> - 2020-07-27 15:40 +0200
            Re: ssl handshake problem with bugs.debian.org? Sven Hartge <sven@svenhartge.de> - 2020-07-27 17:20 +0200

csiph-web