Re: TLS handshake error

10 msg	header check question
12 msg	verify parameters
4 msg	Configure postfix in big env
2 msg	envelope sender '<>' via uucp gets rewrit...
2 msg	Spam filtering only for specific email accounts
3 msg	Postfix 2.4 to 2.5: smtp(d)_tls_session_cache_d...
15 msg	Question about 'standards' WRT BATV and SAV
7 msg	my solution to fight backscatter email
2 msg	AUTO: Joe Grastara is out of the office (return...
12 msg	Q about sender_dependent_relayhost_maps inbound...
16 msg	Milter Suggestions
9 msg	Transport table and postmap
3 msg	Archiving e-mail?
8 msg	Error 550: unable to relay
1 msg	FW: new subject

TLS handshake error
\ Ralf Hildebrandt (8 May 2008)
. \ Ralf Hildebrandt (8 May 2008)
. . \ Victor Duchovni (8 May 2008)
. . . \ Ralf Hildebrandt (8 May 2008)
. . . . \ Victor Duchovni (8 May 2008)
. . . . . \ Ralf Hildebrandt (8 May 2008)
. . . . . . \ Victor Duchovni (8 May 2008)
. \ Victor Duchovni (8 May 2008)
. . \ Ralf Hildebrandt (8 May 2008)
. \ Ralf Hildebrandt (8 May 2008)
. . \ Ralf Hildebrandt (8 May 2008)
. . \ Victor Duchovni (8 May 2008)
. . . \ Ralf Hildebrandt (8 May 2008)

6 msg	Seperating SMTP and POP/IMAP services
3 msg	Test 2
1 msg	Testing
12 msg	[Fwd: ldap users & aliases config]

Subject:	Re: TLS handshake error
Group:	Postfix-users
From:	Ralf Hildebrandt
Date:	8 May 2008

* Victor Duchovni <Victor.Duchovni>:

> They are asking for client certs (I wonder why) and your SMTP client is
> configured with client certs (I wonder why). While the problem may be
> elsewhere, you should probably have "smtp_tls_cert_file = " (empty)
> and only configure client certs for specific transports that deliver
> mail to sites which require you to present a specific certificate.

Fixed.

> Sending client certs just asks for trouble (more things to go wrong).

Yes, I've seen that when I used:
smtpd_tls_ask_ccert = yes

> Of course the problem can also be a data-dependent glitch in the proxy
> you mentioned in a later message.

:)

--
Ralf Hildebrandt (Ralf.Hildebrandt) snickebo
Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155
http://www.arschkrebs.de
"The computer programmer is a creator of universes for which he alone
is responsible. Universes of virtually unlimited complexity can be
created in the form of computer programs."-Joseph Weizenbaum