Re: OpenSSL and Sendmail

Am Fr, den 22.10.2004 schrieb Doug White um 3:38:
> On Thu, 21 Oct 2004, Roman Kennke wrote:
> 
> > since I upgraded to 5.3-RC1 (from 5.2.1) I have a problem with OpenSSL
> > and Sendmail.
> >
> > I configured sendmail as described here:
> >
> > http://www.puresimplicity.net/~hemi/freebsd/sendmail.html
> >
> > This worked fine with 5.2.1
> >
> > Now, when I try to connect to the secure port 465, I get the following
> > error in /var/log/maillog:
> >
> > Oct 21 16:01:10 box7954 sm-mta[33080]: STARTTLS=server:
> > 33080:error:140BA0C3:SSL routines:SSL_new:null ssl
> > ctx:/usr/src/crypto/openssl/ssl/ssl_lib.c:231:
> > Oct 21 16:01:10 box7954 sm-mta[33080]: i9LE1Ak1033080:
> > 1Cust147.vr1.dtm1.alter.net [149.229.96.147] did not issue
> > MAIL/EXPN/VRFY/ETRN during connection to TLSMTA
> 
> Many TLS problems can be traced to defective or missing certificates. Are
> you sure your certs are still valid (haven't expired, still readable,
> somewhere where sendmail can find them, etc)?

Yes, I double checked this. In the meantime I switched to a slightly
different setup, where TSL is enabled on port 25. This seems to work
fine.

/Roman