Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 10 Jun 2001 18:30:50 -0400
From:      "Dan Langille" <dan@langille.org>
To:        freebsd-questions@freebsd.org
Subject:   TLS MTA connections and /etc/mail/sendmail.cf
Message-ID:  <200106102230.f5AMUqU70585@lists.unixathome.org>

next in thread | raw e-mail | index | archive | help
I suspect my configuration of sendmail is attempting to use TLS 
connections without a certificate.  This is based upon a short 
discussion in -chat and an examination of what's in 
/etc/mail/sendmail.cf.

Here's what I keep seeing in my /var/log/maillog as my MTA tries to 
send mail out:

Jun 11 09:55:01 lists sendmail[70003]: f5ADTOU61162: TLS: error: 
SSL_connect failed=-1 (1)
Jun 11 09:55:01 lists sendmail[70003]: f5ADTOU61162: 
ruleset=tls_server, arg1=SOFTWARE, relay=lists.unixathome.org 
[210.48.103.158], reject=403 4.7.0 <postmaster@thedatasource.net>... 
TLS handshake failed.

Connections to this host by hand give this:

$ telnet mail.thedatasource.net 25
Trying 207.91.110.72...
Connected to mail.thedatasource.net.
Escape character is '^]'.
220 thedatasource.net ESMTP CommuniGate Pro 3.2.4

I suspect, but haven't been able to prove yet, that my MTA see the 
above and attempts a TLS connection.  It then fails because my MTA 
has no certificate.  Does this make sense?

-- 
Dan Langille
pgpkey - finger dan@unixathome.org | http://unixathome.org/finger.php

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200106102230.f5AMUqU70585>