I'm running qmail toaster (all latest packages) on Fedora Core 6 and have
the latest version of OpenSSL (in the official fc6 yum repositories) for it:
[EMAIL PROTECTED] control]#* openssl version
*OpenSSL 0.9.8b 04 May 2006*

Since I upgraded to this newest version (I think that was the cause), no
mail servers have been able to make encrypted connections, because of an
error:
[EMAIL PROTECTED] control]#* openssl s_client -starttls smtp -crlf -connect
mail.myhost.tld:25
*CONNECTED(00000003)
24182:error:0D07209B:asn1 encoding routines:ASN1_get_object:too
long:asn1_lib.c:142:
24182:error:0D068066:asn1 encoding routines:ASN1_CHECK_TLEN:bad object
header:tasn_dec.c:1278:
24182:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1
error:tasn_dec.c:208:Type=ASN1_PRINTABLE
24182:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested
asn1 error:tasn_dec.c:749:Field=value, Type=X509_NAME_ENTRY
24182:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested
asn1 error:tasn_dec.c:710:
24182:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested
asn1 error:tasn_dec.c:710:
24182:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested
asn1 error:tasn_dec.c:749:Field=issuer, Type=X509_CINF
24182:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested
asn1 error:tasn_dec.c:749:Field=cert_info, Type=X509
24182:error:1409000D:SSL routines:SSL3_GET_SERVER_CERTIFICATE:ASN1
lib:s3_clnt.c:866:*

A few other commands that might mean something to somebody (but not me):
[EMAIL PROTECTED] control]#* openssl verify -CAfile cabundle.pem -purpose
sslclient /var/qmail/control/servercert.pem
*servercert.pem: OK*

[EMAIL PROTECTED] control]#* openssl asn1parse -inform -in -dump <
/var/qmail/control/servercert.pem
*0:d=0 hl=2 l= 45 cons: <ASN1 13>
Error in encoding
7913:error:0D07209B:asn1 encoding routines:ASN1_get_object:too
long:asn1_lib.c:142:*

Has anyone seen this before?
Thanks for any help

Reply via email to