Re: [Evolution] Postfix TLS and Evolution

[Franck Routier <franck routier axege com>]

Pete Biggs a écrit :

> > Surely the relaying of mail is determined by your server, not the client
> > - what are the error messages on the server?
> >  
Here is the log on the server of a failed attempt to send mail from 
Evolution :

Dec 16 14:33:35 localhost postfix/smtpd[5395]: initializing the 
server-side TLS engine
Dec 16 14:33:35 localhost postfix/smtpd[5395]: connect from 
mygate.com[xx.xx.xx.xx]
Dec 16 14:33:35 localhost postfix/smtpd[5395]: setting up TLS connection 
from mygate.com[xx.xx.xx.xx]
Dec 16 14:33:35 localhost postfix/smtpd[5395]: SSL_accept:before/accept 
initialization
Dec 16 14:33:35 localhost postfix/smtpd[5395]: SSL_accept:error in 
SSLv2/v3 read client hello A
Dec 16 14:33:35 localhost postfix/smtpd[5395]: SSL_accept:error in 
SSLv2/v3 read client hello B
Dec 16 14:33:35 localhost postfix/smtpd[5395]: SSL_accept:SSLv3 read 
client hello A
Dec 16 14:33:35 localhost postfix/smtpd[5395]: SSL_accept:SSLv3 write 
server hello A
Dec 16 14:33:35 localhost postfix/smtpd[5395]: SSL_accept:SSLv3 write 
certificate A
Dec 16 14:33:35 localhost postfix/smtpd[5395]: SSL_accept:SSLv3 write 
certificate request A
Dec 16 14:33:35 localhost postfix/smtpd[5395]: SSL_accept:SSLv3 flush data
Dec 16 14:33:35 localhost postfix/smtpd[5395]: SSL_accept:error in SSLv3 
read client certificate A
Dec 16 14:33:36 localhost last message repeated 2 times
Dec 16 14:33:36 localhost postfix/smtpd[5395]: SSL_accept:SSLv3 read 
client certificate A
Dec 16 14:33:36 localhost postfix/smtpd[5395]: SSL_accept:SSLv3 read 
client key exchange A
Dec 16 14:33:36 localhost postfix/smtpd[5395]: SSL_accept:error in SSLv3 
read certificate verify A        <-----------this seems to be the point 
where it fails
Dec 16 14:33:36 localhost last message repeated 3 times
Dec 16 14:33:36 localhost postfix/smtpd[5395]: SSL_accept:SSLv3 read 
finished A
Dec 16 14:33:36 localhost postfix/smtpd[5395]: SSL_accept:SSLv3 write 
change cipher spec A
Dec 16 14:33:36 localhost postfix/smtpd[5395]: SSL_accept:SSLv3 write 
finished A
Dec 16 14:33:36 localhost postfix/smtpd[5395]: SSL_accept:SSLv3 flush data
Dec 16 14:33:36 localhost postfix/smtpd[5395]: TLS connection 
established from mygate.com[xx.xx.xx.xx]: TLSv1 with cipher RC4-MD5 
(128/128 bits)
Dec 16 14:33:36 localhost postfix/smtpd[5395]: NOQUEUE: reject: RCPT 
from mygate.com[xx.xx.xx.xx]: 554 <myfriend dest org>: Relay access 
denied; from=<franck routier axege com> to=<myfriend dest org> 
proto=ESMTP helo=<[yy.yy.yy.yy]>
Dec 16 14:33:37 localhost postfix/smtpd[5395]: disconnect from 
mygate.com[xx.xx.xx.xx]

and this is a succesful attempt, from Mozilla, with the excact same 
certificate :

Dec 16 14:13:57 localhost postfix/smtpd[5364]: initializing the 
server-side TLS engine
Dec 16 14:13:57 localhost postfix/smtpd[5364]: connect from 
mygate.com[xx.xx.xx.xx]
Dec 16 14:13:57 localhost postfix/smtpd[5364]: setting up TLS connection 
from mygate.com[xx.xx.xx.xx]
Dec 16 14:13:57 localhost postfix/smtpd[5364]: SSL_accept:before/accept 
initialization
Dec 16 14:13:57 localhost postfix/smtpd[5364]: SSL_accept:error in 
SSLv2/v3 read client hello A
Dec 16 14:13:57 localhost postfix/smtpd[5364]: SSL_accept:error in SSLv3 
read client hello B
Dec 16 14:13:57 localhost postfix/smtpd[5364]: SSL_accept:error in SSLv3 
read client hello B
Dec 16 14:13:57 localhost postfix/smtpd[5364]: SSL_accept:SSLv3 read 
client hello B
Dec 16 14:13:57 localhost postfix/smtpd[5364]: SSL_accept:SSLv3 write 
server hello A
Dec 16 14:13:57 localhost postfix/smtpd[5364]: SSL_accept:SSLv3 write 
certificate A
Dec 16 14:13:57 localhost postfix/smtpd[5364]: SSL_accept:SSLv3 write 
key exchange A
Dec 16 14:13:57 localhost postfix/smtpd[5364]: SSL_accept:SSLv3 write 
certificate request A
Dec 16 14:13:57 localhost postfix/smtpd[5364]: SSL_accept:SSLv3 flush data
Dec 16 14:13:57 localhost postfix/smtpd[5364]: SSL_accept:error in SSLv3 
read client certificate A
Dec 16 14:14:03 localhost last message repeated 2 times
Dec 16 14:14:03 localhost postfix/smtpd[5364]: certificate verification 
depth=1 subject=/C=FR/ST=Auvergne/L=Clermont-Ferrand/O=Axege 
Sarl/CN=Axege Sarl Root CA/emailAddress=franck routier axege com
Dec 16 14:14:03 localhost postfix/smtpd[5364]: verify return: 1
Dec 16 14:14:03 localhost postfix/smtpd[5364]: certificate verification 
depth=0 subject=/C=FR/ST=Auvergne/L=Clermont-Ferrand/O=Axege 
Sarl/CN=franck routier axege com/emailAddress=franck routier axege com
Dec 16 14:14:03 localhost postfix/smtpd[5364]: verify return: 1
Dec 16 14:14:03 localhost postfix/smtpd[5364]: SSL_accept:SSLv3 read 
client certificate A
Dec 16 14:14:03 localhost postfix/smtpd[5364]: SSL_accept:SSLv3 read 
client key exchange A
Dec 16 14:14:03 localhost postfix/smtpd[5364]: SSL_accept:SSLv3 read 
certificate verify A
Dec 16 14:14:03 localhost postfix/smtpd[5364]: SSL_accept:error in SSLv3 
read finished A
Dec 16 14:14:03 localhost last message repeated 3 times
Dec 16 14:14:03 localhost postfix/smtpd[5364]: SSL_accept:SSLv3 read 
finished A
Dec 16 14:14:03 localhost postfix/smtpd[5364]: SSL_accept:SSLv3 write 
change cipher spec A
Dec 16 14:14:03 localhost postfix/smtpd[5364]: SSL_accept:SSLv3 write 
finished A
Dec 16 14:14:03 localhost postfix/smtpd[5364]: SSL_accept:SSLv3 flush data
Dec 16 14:14:03 localhost postfix/smtpd[5364]: 
subject=/C=FR/ST=Auvergne/L=Clermont-Ferrand/O=Axege 
Sarl/CN=franck routier axege com/emailAddress=franck routier axege com
Dec 16 14:14:03 localhost postfix/smtpd[5364]: 
issuer=/C=FR/ST=Auvergne/L=Clermont-Ferrand/O=Axege Sarl/CN=Axege Sarl 
Root CA/emailAddress=franck routier axege com
Dec 16 14:14:03 localhost postfix/smtpd[5364]: 
fingerprint=BB:BB:BB:BB:BB:BB:BB:BB:BB:BB:BB:BB:BB:BB:BB:BB
Dec 16 14:14:03 localhost postfix/smtpd[5364]: Verified: 
subject_CN=franck routier axege com, issuer=Axege Sarl Root CA
Dec 16 14:14:03 localhost postfix/smtpd[5364]: TLS connection 
established from mygate.com[xx.xx.xx.xx]: TLSv1 with cipher 
DHE-RSA-AES256-SHA (256/256 bits)
Dec 16 14:14:03 localhost postfix/smtpd[5364]: 6A1B7E3C37: 
client=mygate.com[xx.xx.xx.xx]
Dec 16 14:14:03 localhost postfix/cleanup[5369]: 6A1B7E3C37: 
message-id=<43A2BDFC 10506 axege com>
Dec 16 14:14:03 localhost postfix/qmgr[5269]: 6A1B7E3C37: 
from=<franck routier axege com>, size=549, nrcpt=1 (queue active)
Dec 16 14:14:03 localhost postfix/smtpd[5373]: initializing the 
server-side TLS engine
Dec 16 14:14:03 localhost postfix/smtpd[5364]: disconnect from 
mygate.com[xx.xx.xx.xx]
Dec 16 14:14:03 localhost postfix/smtpd[5373]: connect from 
localhost.localdomain[127.0.0.1]
Dec 16 14:14:03 localhost postfix/smtpd[5373]: C45CCE3C3A: 
client=localhost.localdomain[127.0.0.1]
Dec 16 14:14:03 localhost postfix/cleanup[5369]: C45CCE3C3A: 
message-id=<43A2BDFC 10506 axege com>
Dec 16 14:14:03 localhost postfix/qmgr[5269]: C45CCE3C3A: 
from=<franck routier axege com>, size=982, nrcpt=1 (queue active)
Dec 16 14:14:03 localhost postfix/smtpd[5373]: disconnect from 
localhost.localdomain[127.0.0.1]