Bug#348046: exim4-daemon-heavy: TLS delivery attempts fail

[Marc Haber]

On Tue, Jul 25, 2006 at 06:09:56PM -0700, Ian Zimmerman wrote:
> itz at madbat:/etc/exim4/conf.d$ openssl s_client -connect 127.0.0.1:587 -starttls smtp
> CONNECTED(00000003)
> 20025:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:567:
> itz at madbat:/etc/exim4/conf.d$ 

This is most probably caused by a bug in openssl s_client that
immediately issued a STARTTLS command without saying EHLO before
(which exim rejected). This can be seen when adding the -debug switch.
I have just verified that the openssl in Debian etch does it wrong as
well.

Later versions of openssl (including the one in Debian sid) handle
this correctly. Can you verify this please so that this sub-bug can be
closed?

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835