Bug#355272: exim4-daemon 4.60-3 fails TLS

[Andreas Metzler]

On 2006-03-04 ZHANG Guiyu <kuiyu at mosuma.com> wrote:
> Package: exim4-daemon
> Version: 4.60-3
> Severity: important

> TLS authentication using the same 2 attached config files

> a) fails with exim4-daemon 4.60-3 (see exim4-daemon 4.60 log below)

> b) works with exim4-daemon 4.52 (see exim4-daemon 4.52 log below)

> Client used to connect to exim4: Mozilla Thunderbird 1.5 ("use TLS" option in SMTP setting) running on Windows XP

> exim4-daemon 4.60-3  uses libgnutls.so.12.3.6
> exim4-daemon 4.52    uses lignutls.so.11.1.16

> Error may be caused by libgnutls linked to exim 4.60.
[...]
> -------------------------------------
> Starting MTA: Exim version 4.60 uid=0 gid=0 pid&248 D�b95cfd
[...]
> 26251 initializing GnuTLS as a server
> 26251 LOG: MAIN
> 26251   TLS error on connection from ([192.168.0.100]) [202.156.83.43] (tls-init): The gcrypt library version is too old.
> 26251 SMTP>> 454 TLS currently unavailable
> -------------------------------------
[...]

This sounds like another instance of #330019.

We'll need version information.
dpkg -l exim4-daemon-light libgnutls12 libgcrypt11 libgpg-error0 libopencdk8 libtasn1-2

It works for me with current sid (on ix86).
ii  exim4-daemon-l 4.60-3         lightweight exim MTA (v4) daemon
ii  libgcrypt11    1.2.2-1        LGPL Crypto library - runtime library
ii  libgnutls12    1.2.9-2        the GNU TLS library - runtime library
ii  libgpg-error0  1.2-1          library for common error values and messages
ii  libopencdk8    0.5.7-2        Open Crypto Development Kit (OpenCDK) (runti
ii  libtasn1-2     0.2.17-1       Manage ASN.1 structures (runtime)
swaks -q ehlo -s localhost -tls
[...]
 -> STARTTLS
<-  220 TLS go ahead
=== TLS started w/ cipher DHE-RSA-AES256-SHA
 ~> EHLO argenau.downhill.at.eu.org
<~  250-argenau Hello argenau.downhill.at.eu.org [127.0.0.1]
<~  250-SIZE 52428800
<~  250-PIPELINING
<~  250 HELP
 ~> QUIT

 cu andreas
-- 
The 'Galactic Cleaning' policy undertaken by Emperor Zhark is a personal
vision of the emperor's, and its inclusion in this work does not constitute
tacit approval by the author or the publisher for any such projects,
howsoever undertaken.                                (c) Jasper Ffforde