Re: ssl handshake problem with bugs.debian.org?

From	Sven Hartge <sven@svenhartge.de>
Newsgroups	linux.debian.user
Subject	Re: ssl handshake problem with bugs.debian.org?
Date	2020-07-27 17:20 +0200
Message-ID	<Axd50-7M3-15@gated-at.bofh.it> (permalink)
References	(1 earlier) <Ax7iV-4dZ-3@gated-at.bofh.it> <Ax7sB-4hd-5@gated-at.bofh.it> <Ax8ym-4Ty-7@gated-at.bofh.it> <Ax9Xr-5Em-3@gated-at.bofh.it> <Axbwe-6Jq-15@gated-at.bofh.it>
Organization	Newsfeed am Wurmloch

Show all headers | View raw

Harald Dunkel <harald.dunkel@aixigo.com> wrote:
> [-- text/plain, encoding 7bit, charset: utf-8, 60 lines --]

> On 2020-07-27 13:49, Sven Hartge wrote:
>> 
>> Does your MTA present a client certificate? Maybe buxtehude does not
>> like that?
>> 

> Yes, it has a certificate. Whether buxtehude likes it I cannot say,
> but it looks OK to me. Its a wildcard certificate, though:

> Certificate:
>         Subject: C=DE, ST=Nordrhein-Westfalen, L=Aachen, O=aixigo AG, OU=Internet, CN=*.aixigo.de

Wildcard or not shouldn't matter. What matters if the Server uses that
certificate as a client certificate.

> BTW, the problem showed up first on June 17th.

>> When diagnosing SSL errors I also find it helpful to wireshark the
>> connection to see which side exactly triggers the SSL Alert. That may
>> help highlight the culprit here.
>> 

> See attachment. AFAICT this is all encrypted.

Yes, but with TLS1.0 to TLS1.2 you could see the Alert and the rejection
of the connection unencrypted.

But your server and buxtehude switch to TLS1.3 and that prevents that
kind of information from showing, IIRC, including the handshake with the
certificate exchange.

So, unfortunately this seems to be a dead end.

S°

-- 
Sigmentation fault. Core dumped.

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

ssl handshake problem with bugs.debian.org? Harald Dunkel <harri@afaics.de> - 2020-07-27 11:00 +0200
  Re: ssl handshake problem with bugs.debian.org? Reco <recoverym4n@enotuniq.net> - 2020-07-27 11:10 +0200
    Re: ssl handshake problem with bugs.debian.org? Sven Hartge <sven@svenhartge.de> - 2020-07-27 11:20 +0200
      Re: ssl handshake problem with bugs.debian.org? Harald Dunkel <harald.dunkel@aixigo.com> - 2020-07-27 12:30 +0200
        Re: ssl handshake problem with bugs.debian.org? Sven Hartge <sven@svenhartge.de> - 2020-07-27 14:00 +0200
          Re: ssl handshake problem with bugs.debian.org? Harald Dunkel <harald.dunkel@aixigo.com> - 2020-07-27 15:40 +0200
            Re: ssl handshake problem with bugs.debian.org? Sven Hartge <sven@svenhartge.de> - 2020-07-27 17:20 +0200

csiph-web