code of tail /var/log/mail.log Code: smtpd[742]: disconnect from localhost.localdomain[127.0.0.1] Oct 5 19:45:27 dec1 pop3d: Connection, ip=[::ffff:127.0.0.1] Oct 5 19:45:27 dec1 pop3d: Disconnected, ip=[::ffff:127.0.0.1] Oct 5 19:45:27 dec1 imapd: Connection, ip=[::ffff:127.0.0.1] Oct 5 19:45:27 dec1 imapd: Disconnected, ip=[::ffff:127.0.0.1], time=0 Oct 5 19:45:28 dec1 postfix/smtpd[872]: connect from localhost.localdomain[127.0.0.1] Oct 5 19:45:28 dec1 postfix/smtpd[872]: setting up TLS connection from localhost.localdomain[127.0.0.1] Oct 5 19:45:28 dec1 postfix/smtpd[872]: SSL_accept error from localhost.localdomain[127.0.0.1]: 0 Oct 5 19:45:28 dec1 postfix/smtpd[872]: lost connection after CONNECT from localhost.localdomain[127.0.0.1] Oct 5 19:45:28 dec1 postfix/smtpd[872]: disconnect from localhost.localdomain[127.0.0.1 The thing is that openssl cant connect to localhost port 25 but yes to port 443 Code of openssl s_client -connect localhost:25 -showcerts -CAfile /etc/ssl/certs/smtp.crt -key /etc/ssl/private/smtp.key -msg -state Code: CONNECTED(00000003) SSL_connect:before/connect initialization >>> SSL 3.0 Handshake [length 0086], ClientHello 01 00 00 82 03 00 4e 8d 02 33 26 b3 b8 e7 39 ed a7 43 82 11 ef 0b 36 ae 31 6c e4 94 6f f2 3f 76 21 06 e1 f7 0d 05 00 00 5a c0 14 c0 0a 00 39 00 38 00 88 00 87 c0 0f c0 05 00 35 00 84 c0 12 c0 08 00 16 00 13 c0 0d c0 03 00 0a c0 13 c0 09 00 33 00 32 00 9a 00 99 00 45 00 44 c0 0e c0 04 00 2f 00 96 00 41 c0 11 c0 07 c0 0c c0 02 00 05 00 04 00 15 00 12 00 09 00 14 00 11 00 08 00 06 00 03 00 ff 02 01 00 SSL_connect:SSLv3 write client hello A <<< SSL 3.0 Alert [length 0002], fatal handshake_failure 02 28 SSL3 alert read:fatal:handshake failure SSL_connect:failed in SSLv3 read server hello A 3075511944:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1195:SSL alert number 40 3075511944:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:591: --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 7 bytes and written 0 bytes
Some changes here and there on postfix config files and now the handshake error is not present anymore, but I am still unable to send o receive mails. Code of openssl s_client -connect localhost:25 -showcerts -CAfile /etc/ssl/certs/postfix.pem -key /etc/ssl/private/postfix.pem -msg –state Code: SSL_connect:SSLv3 read server key exchange A <<< SSL 3.0 Handshake [length 0004], ServerHelloDone 0e 00 00 00 SSL_connect:SSLv3 read server done A >>> SSL 3.0 Handshake [length 0046], ClientKeyExchange 10 00 00 42 41 04 75 58 5c c8 dc 92 c2 1b 0b 72 d5 59 ec e3 80 47 88 b3 e5 c9 76 c7 1f 52 2e 1e 57 0e 50 b3 ad 29 c1 43 54 e1 46 fe 75 46 48 3a da ff 91 2a fd c1 64 54 88 97 bc 4f dc cd 8b 7d e0 10 15 b8 f9 07 SSL_connect:SSLv3 write client key exchange A >>> SSL 3.0 ChangeCipherSpec [length 0001] 01 SSL_connect:SSLv3 write change cipher spec A >>> SSL 3.0 Handshake [length 0028], Finished 14 00 00 24 8e 8f 54 7e 7d 67 8c c3 4f 48 3f ad 13 01 79 33 b1 1e a1 77 7f a4 5c 73 a5 90 5f a6 79 75 4b cd 19 20 1a 65 SSL_connect:SSLv3 write finished A SSL_connect:SSLv3 flush data <<< SSL 3.0 ChangeCipherSpec [length 0001] 01 <<< SSL 3.0 Handshake [length 0028], Finished 14 00 00 24 c6 4a 6a 44 29 53 99 c7 17 09 85 c9 48 08 a3 a2 33 f9 ec 91 33 96 b5 19 b9 f8 38 7e 3c ed c1 a7 0c d4 c4 4c SSL_connect:SSLv3 read finished A No client certificate CA names sent --- SSL handshake has read 1714 bytes and written 305 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA Server public key is 2048 bit Secure Renegotiation IS supported Compression: zlib compression Expansion: zlib compression SSL-Session: Protocol : SSLv3 Cipher : ECDHE-RSA-AES256-SHA Session-ID: 3527C1D05259ABB52D6509217F16D5D8D1E9C132AC48AB6F0C2DF7615578AC45 Session-ID-ctx: Master-Key: 6EB3B8F793986A3B94CE0137AAAC279B0288755B91A1CAD08859F6A7A0CDB480304A03B9083D85FC598B3403F394E908 Key-Arg : None PSK identity: None PSK identity hint: None Compression: 1 (zlib compression) Start Time: 1317997751 Timeout : 7200 (sec) Verify return code: 18 (self signed certificate) --- read:errno=0 >>> SSL 3.0 Alert [length 0002], warning close_notify 01 00 SSL3 alert write:warning:close notify From the logs I got this: dec1:/etc/postfix/sasl# tail /var/log/mail.err Code: Oct 6 17:57:27 dec1 postfix/smtpd[18677]: fatal: no SASL authentication mechanisms dec1:/etc/postfix/sasl# tail /var/log/mail.log Code: Oct 6 19:53:21 dec1 postfix/master[22681]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling Oct 6 19:55:01 dec1 pop3d: Connection, ip=[::ffff:127.0.0.1] Oct 6 19:55:01 dec1 imapd: Connection, ip=[::ffff:127.0.0.1] Oct 6 19:55:01 dec1 pop3d: Disconnected, ip=[::ffff:127.0.0.1] Oct 6 19:55:01 dec1 imapd: Disconnected, ip=[::ffff:127.0.0.1], time=0 Oct 6 19:55:02 dec1 postfix/smtpd[22953]: connect from localhost.localdomain[127.0.0.1] Oct 6 19:55:02 dec1 postfix/smtpd[22953]: setting up TLS connection from localhost.localdomain[127.0.0.1] Oct 6 19:55:02 dec1 postfix/smtpd[22953]: SSL_accept error from localhost.localdomain[127.0.0.1]: 0 Oct 6 19:55:02 dec1 postfix/smtpd[22953]: lost connection after CONNECT from localhost.localdomain[127.0.0.1] Oct 6 19:55:02 dec1 postfix/smtpd[22953]: disconnect from localhost.localdomain[127.0.0.1] dec1:/etc/postfix/sasl# tail /var/log/syslog Code: Oct 6 19:55:02 dec1 postfix/smtpd[22953]: disconnect from localhost.localdomain[127.0.0.1] Oct 6 19:56:01 dec1 slapd[10851]: <= bdb_equality_candidates: (uid) not indexed Oct 6 19:56:01 dec1 /USR/SBIN/CRON[23011]: (root) CMD (/usr/local/ispconfig/server/server.sh > /dev/null 2>> /var/log/ispconfig/cron.log) Oct 6 19:57:01 dec1 slapd[10851]: <= bdb_equality_candidates: (uid) not indexed Oct 6 19:57:01 dec1 /USR/SBIN/CRON[23022]: (root) CMD (/usr/local/ispconfig/server/server.sh > /dev/null 2>> /var/log/ispconfig/cron.log) Oct 6 19:57:38 dec1 slapd[10851]: conn=1305 op=0 do_extended: unsupported operation "1.3.6.1.4.1.1466.20037" Oct 6 19:57:38 dec1 winbindd[2132]: [2011/10/06 19:57:38.190779, 0] lib/smbldap.c:731(smb_ldap_start_tls) Oct 6 19:57:38 dec1 winbindd[2132]: Failed to issue the StartTLS instruction: Protocol error Oct 6 19:58:01 dec1 slapd[10851]: <= bdb_equality_candidates: (uid) not indexed
