https://bugs.exim.org/show_bug.cgi?id=2034
Andreas Metzler <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|TLS error on connection |ignore errors on connection |from ... |close without TLS shutdown |(gnutls_handshake): The TLS | |connection was non-properly | |terminated. | Status|RESOLVED |REOPENED Resolution|WORKSFORME |--- --- Comment #6 from Andreas Metzler <[email protected]> --- Hello, this seems to come up again and again: https://lists.exim.org/lurker/message/20240728.163150.a498bf57.html https://lists.exim.org/lurker/message/20240313.192339.afc81f8f.html https://lists.exim.org/lurker/message/20230912.115936.4ddc7991.html https://lists.exim.org/lurker/message/20210118.153132.8a5021e9.de.html The dominating e-mail providers seem to not bother with TLS shutdown and exim logs an error (GnuTLS: The TLS connection was non-properly terminated / OpenSSL: unexpected eof while reading). Afaict nobody thinks the error message serves a real purpose: Jeremy Harris: | Google is violating standards, according to the OpenSSL library. | | Complain to them (and you'll be ignored, like the rest of us). Viktor Dukhovni said postfix ignores the error since the possible truncation attacks that this warning message warns about don't apply to SMTP and the respective postfix code-path only does TLS for SMTP. Assumimg this (only SMTP TLS use) it probably would make sense to also set SSL_OP_IGNORE_UNEXPECTED_EOF for OpenSSL and ignore GNUTLS_E_PREMATURE_TERMINATION? See https://github.com/hestiacp/hestiacp/issues/3781 for further information and a suggested gnutls-patch. Thanks for considering, cu Andrreas -- You are receiving this mail because: You are on the CC list for the bug. -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-dev.lists.exim.org/ ## unsubscribe (doesn't require an account): ## [email protected] ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
