This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

5.050 Beta bug in SSL SMTP authentication?

Hello,
Testing 5.050, unsure if this is a bug or not.

Installed 5.050 and restored backup. I was using SSL auth for SMTP and had issued the exim.cert to all my users. This morning nobody could send email.

Turning off SSL works now in the SMTP proxy settings in SSL (Thanks for fulfilling my request on that btw!!)

Users can now send mail if they turn off SSL on their clients (Outlook). (ie send in clear text)

However, why isn't SSL working? After I restored backup, I copied the exim.cert back onto the ASL 5.050 system so it *should* be the same setup as 5.026???

I am seeing these entries in the SMTP log:
2004:11:23-09:07:20 (none) exim[2287]: 2004-11-23 09:07:20 TLS error on connection from 70-57-9-163.dnvr.qwest.net (MM00240) [70.57.9.163] (SSL_CTX_use_PrivateKey_file): error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch

This implies the key is wrong?

However, even if the client does NOT have the certificate installed, Outlook used to prompt them to go ahead anyway or cancel, they are not getting that prompt anymore, they are just getting an SSL SMTP auth error and not being able to send.

Could someone please let me know if I have done something wrong or if the behavior has changed in some subtle way.

Thanks.

This thread was automatically locked due to age.

0 Simon Shaw over 20 years ago

When TLS is off, (ie send clear text), will it accept an SSL connection if it receives one? ie "Accept clear text *or* encrypted".
Or will it bomb out?
Cancel
Vote Up 0 Vote Down

Cancel
0 tom_01 over 20 years ago

You say you copied back the cert. Did you copy the key as well?
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 20 years ago in reply to tom_01

Ooohhh errrr...

No.

My bad [:)]

Where is the key kept?

I'll follow this up further tomorrow.
Cancel
Vote Up 0 Vote Down

Cancel
0 Marcel_01 over 20 years ago in reply to Simon Shaw

it's named exim.key and you'll find it in the same directory.

~marcel
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 20 years ago in reply to Marcel_01

Heh.. Any chance of including these in backup files? Thanks staff!
Cancel
Vote Up 0 Vote Down

Cancel
0 Marcel_01 over 20 years ago in reply to Simon Shaw

they should already be in - /etc/wfe/conf/backup.ini holds a list of files which go to the backup file. can you check if they are in?

~marcel
Cancel
Vote Up 0 Vote Down

Cancel
0 n0c9 over 20 years ago in reply to Marcel_01

Hi All

Not sure if this is a bug or not but in the Executive report that is e-mailed i have noticed that the Packet filter violation (daily graph) is not in the center . It is off to the left while all the other graph are centered. This is the first i have seen of this as i have other asatro boxes runnning asl5.26 with out seeing this problem only in this bata [:S]
Cancel
Vote Up 0 Vote Down

Cancel
0 andreas over 20 years ago in reply to n0c9

The code generating the executive report was not changed from 5.026 to 5.050, as far as I know. I can't check at the moment, but will do on monday.

Occassionally we hear of queer executive reports; in rare cases, the HTML code of the report seems to be incomplete. Can you please check if the HTML looks right? (In your case, an "align" tag seems to be missing or incomplete). I am also curious if the next exec report from that machine looks the same or if it's broken...
Cancel
Vote Up 0 Vote Down

Cancel
0 n0c9 over 20 years ago in reply to andreas

Hi Andreas
The problem seems to only be in the e-mail not in a webrowser as when i login to asl and open the report it is fine but if i open it via outlook 2003 only the packet filter violation is align to the left . This has only started sence i installed the bata 5.050. But this could be just an outlook problem
Cancel
Vote Up 0 Vote Down

Cancel