* Kirill Miazine [2017-03-02 16:46]:
* Kirill Miazine [2017-03-02 13:28]:
Hi, list
Recently I've noticed a number of error messages in my Exim mail log:
TLS error on connection from mx1.slc.paypal.com (mx0.slc.paypal.com)
[173.0.84.226] \
(SSL_accept): error:1403741B:SSL routines:ACCEPT_SR_KEY_EXCH:tlsv1 alert
decrypt error
TLS client disconnected cleanly (rejected our certificate?)
[...]
The system is a couple of days old snapshot. The system used to run 6.0
until recently, I was tempted to upgrade now that DNSSEC support in the
resolver has appeared.
the Norwegian Unix User Group's server skapet has a snapshot dated 4th
February 2017 and has also seen traces of the issue:
16:38 < pitrh> 2017-03-02 02:09:50 TLS error on connection from
mx0.phx.paypal.com
[66.211.168.230] (SSL_accept): error:14FFF41B:SSL
routines:SSL_internal:tlsv1
alert decrypt error
[...]
16:38 < pitrh> 2017-02-24 14:00:44 TLS error on connection from
(mailbanderolepub.com)
[81.56.249.123] (SSL_accept): error:14FFF41B:SSL
routines:SSL_internal:tlsv1
alert decrypt error
This is related to LibreSSL: I've rebuilt Exim with OpenSSL from the
openssl-1.0.2k package and forced an email from PayPal (another 10 EUR
to the foundation). The email arrived just fine...
Received: from mx0.slc.paypal.com ([173.0.84.225])
by mail.krot.org with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89_RC7)
(envelope-from <serv...@paypal.com>)
id 1cjZnX-000Gru-TS
for k...@krot.org; Fri, 03 Mar 2017 00:06:12 +0100
--
-- Kirill Miazine <k...@krot.org>
