On Sat, Jan 19, 2019 at 08:12:29PM +0100, Johannes Krottmayer wrote: > Hello, > > I have a question or a problem of understanding. > > When I try to connect through the the command line utility openssl to > port smtp or submission I get this output: > > $ openssl s_client -connect odin42:25
openssl s_client -connect host:port -starttls smtp I did the same thing and forgot the starttls bit. The whole pipelining thing doesn't really help to figure it out though. > CONNECTED(00000003) > 139782539474752:error:1408F10B:SSL routines:ssl3_get_record:wrong > version number:ssl/record/ssl3_record.c:252: > --- > no peer certificate available > --- > No client certificate CA names sent > --- > SSL handshake has read 5 bytes and written 176 bytes > Verification: OK > --- > New, (NONE), Cipher is (NONE) > Secure Renegotiation IS NOT supported > Compression: NONE > Expansion: NONE > No ALPN negotiated > SSL-Session: > Protocol : TLSv1.2 > Cipher : 0000 > Session-ID: > Session-ID-ctx: > Master-Key: > PSK identity: None > PSK identity hint: None > SRP username: None > Start Time: 1547924099 > Timeout : 7200 (sec) > Verify return code: 0 (ok) > Extended master secret: no > --- > $ > > And in /var/log/maillog on the server these messages appears: > > Jan 19 19:41:07 odin42 smtpd[25442]: 430c551fc99f310d smtp connected > address=194.96.2.67 host=194-96-2-67.adsl.highway.telekom.at > Jan 19 19:41:07 odin42 smtpd[25442]: 430c551fc99f310d smtp bad-input > address=194.96.2.67 host=194-96-2-67.adsl.highway.telekom.at result="500 > 5.5.1 Invalid command: Pipelining not supported" > Jan 19 19:41:07 odin42 smtpd[25442]: 430c551fc99f310d smtp disconnected > address=194.96.2.67 host=194-96-2-67.adsl.highway.telekom.at reason=quit > > When I connect to smtps port, everything works fine. > > Here is my listen setup of OpenSMTPD: > > # listen setup > listen on lo0 > listen on lo0 port 10028 tag DKIM > listen on egress tls pki mx1.krottmayer.com.pki auth-optional > listen on egress smtps pki mx1.krottmayer.com.pki auth > listen on egress port submission tls pki mx1.krottmayer.com.pki auth > > Could somebody check my configuration, please? > > Thanks in advance! > > -- > Best regards, > > Johannes > > -- > You received this mail because you are subscribed to [email protected] > To unsubscribe, send a mail to: [email protected] > -- You received this mail because you are subscribed to [email protected] To unsubscribe, send a mail to: [email protected]
