Bug 118198 - mail/qmail-tls port missing openssl cipher list installation
Summary: mail/qmail-tls port missing openssl cipher list installation
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Renato Botelho
Depends on:
Reported: 2007-11-22 14:50 UTC by areilly
Modified: 2007-12-26 16:50 UTC (History)
0 users

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description areilly 2007-11-22 14:50:01 UTC
        Installed /usr/ports/mail/qmail-tls (fixed as per
        ports/118117) and think that all is fine, but a bunch
        of missing mail prompted me to point first tcpdump and
        then openssl s_client at the new server, whereupon
        it became obvious that actual attempts to *use* the
        STARTTLS facility resulted in the ssl session dying with
        a message like:

2472:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:596:

	Investigation with google found this pertinent web page:
        which contained a description of the problem (which
        apparently happened on Debian Linux too) and the
        following fix, which works for me.


Per the toaster page:
	openssl ciphers > /var/qmail/control/tlsclientciphers
	openssl ciphers > /var/qmail/control/tlsserverciphers

        the s_client session described above now leaves you
        talking SMTP over the SSL link.
How-To-Repeat: 	cd /usr/ports/mail/qmail-tls
	make install
	# edit /usr/local/openssl/openssl.cnf to suit
	make certificate
	openssl s_client -debug -crlf -starttls smtp -connect localhost:25
        # notice that connection terminates immediately and
        #error message noted above is last thing displayed.
Comment 1 Edwin Groothuis freebsd_committer 2007-11-22 22:00:20 UTC
Responsible Changed
From-To: freebsd-ports-bugs->garga

Over to maintainer (via the GNATS Auto Assign Tool)
Comment 2 dfilter service freebsd_committer 2007-12-26 16:44:01 UTC
garga       2007-12-26 16:43:55 UTC

  FreeBSD ports repository

  Modified files:
    mail/qmail           Makefile pkg-plist 
    mail/qmail-mysql     Makefile 
    mail/qmail-spamcontrol Makefile 
    mail/qmail-tls       Makefile 
  Added files:
    mail/qmail/files     extra-patch-amd64 qmail-smtpd.rcNG 
  - Fix a segfault on amd64 (except on qmail-spamcontrol and qmail-ldap) [1]
  - Add an rcNG startup example file to QMAIL_PREFIX/boot [2]
  - Bump PORTREVISION due to rcNG add (except for qmail-ldap)
  - Fix make certificate to add ciphers file to QMAIL_PREFIX/control [3]
  PR:             ports/118117 [1], ports/117422 [2], ports/118198 [3]
  Submitted by:   Andrew Reilly <areilly@bigpond.net.au> [1] [3]
                  Nick@van-laarhoven.org [2]
  Revision  Changes    Path
  1.20      +1 -1      ports/mail/qmail-mysql/Makefile
  1.23      +1 -1      ports/mail/qmail-spamcontrol/Makefile
  1.22      +1 -1      ports/mail/qmail-tls/Makefile
  1.126     +10 -1     ports/mail/qmail/Makefile
  1.1       +20 -0     ports/mail/qmail/files/extra-patch-amd64 (new)
  1.1       +52 -0     ports/mail/qmail/files/qmail-smtpd.rcNG (new)
  1.17      +2 -1      ports/mail/qmail/pkg-plist
cvs-all@freebsd.org mailing list
To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
Comment 3 Renato Botelho freebsd_committer 2007-12-26 16:44:31 UTC
State Changed
From-To: open->closed

Committed. Thanks!