Bug#311211: exim4: upgrade to 4.50-6 breaks smtp-auth client config

Marc Haber Marc Haber <mh+debian-packages@zugschlus.de>, 311211@bugs.debian.org
Tue, 31 May 2005 08:49:27 +0200

reopen #311211


On Tue, May 31, 2005 at 01:32:34AM -0500, Matt Walters wrote:
> On Tue, May 31, 2005 at 07:37:33AM +0200, Marc Haber wrote:
> > SSL was never a default, it needed to be manually enabled. And the way
> > how to do this was changed in 4.50-6, but unfortunately underdocumented.

That - of course - concerns exim4 as a server. Sorry for mixing that
up again.

> > Can you please look whether the current README.Debian, available on
> > http://svn.debian.org/wsvn/pkg-exim4/exim/trunk/debian/README.Debian?op=file&rev=0&sc=0,
> > solves your problem?
> "Both exim4-daemon-heavy and exim4-daemon-light support TLS/SSL using the
> GnuTLS library and exim will use TLS *automatically* as client if the
> server exim connects to offers it."

It looks like this works right out of the box. I installed
exim4-daemon-light in a chroot, and delivered a message. It arrived
with the following Received:-Header:

Received: from lefler.int.l21.ma.zugschlus.de ([])
        by torres.int.l21.ma.zugschlus.de with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA:32)
        (Exim 4.50)
        id 1Dd0Pn-0007oI-GG
        for mh+eximtest@zugschlus.de; Tue, 31 May 2005 08:39:51 +0200

That looks like TLS was actually used.

>  - I used to use exim4 as a client to send mail to an SSL-only SMTP
>    server requiring authentication.
>  - I did this by first running debconf and choosing "mail sent by
>    smarthost; received via SMTP or fetchmail". The instructions told me
>    to customize /etc/exim4/passwd.client. I did so.
>  - Everything worked fine for several months.
>  - Something in the past 10 days something changed. I assume the testing
>    exim4 package was updated. Now despite following the same procedure,
>    I cannot send mail.

I'd like to see debug output of a delivery attempt. Please do
something like

echo foo | sudo /usr/sbin/exim4 -d some.address@example.com

and send me the resulting output.

> I am closing this as you are confident this is a problem with my system
> and I don't know what further information I can offer.

Excuse me? Where did I say I were confident in anything? We are right
in the middle of the debugging process. Are you willing to help?


Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835