Bug#348046: exim4-daemon-heavy: TLS delivery attempts fail with: (gnutls_handshake): A TLS packet with unexpected length was received.

[Marc Haber]

On Sat, Jan 05, 2008 at 02:27:26PM +1100, Andrew McGlashan wrote:
> Simon Josefsson wrote:
> > There is clearly still some problem between IM and Exim, but that
> > could be the topic for another report?  It would be interesting if
> > you could identify whether it is related to exim (i.e., does it
> > happen with sendmail too?)  or gnutls (i.e., does it happen if exim4
> > is linked with openssl?).
> 
> Part of the problem relates to my server having a strict requirement to use 
> SSL with SMTP Auth.  Popping email using SSL on port 995 works fine using 
> qpopper.  Gmail works fine with SSL on port 465.  So the combination of 
> these observations points to an Exim issue... from what I can tell. 
> Although Outlook Express works fine with both my server and a gmail one both 
> using SSL over port 465.

I am having a problem with your port references. It would be more
helpful if you'd not only reference the port number (which is most
probably irrelevant for debugging), but also the protocol you're
using. I feel that we are mixing up plain unencrypted SMTP (which
usually runs on ports tcp/25 and/or tcp/587), the ESMTP STARTTLS extension
(which also runs on ports tcp/25 and/or tcp/587 and is negotiated in a clear
text handshake involving the EHLO and STARTTLS commands), and the
non-standardized "SMTP over SSL" protocol which microsoft and other
sites use on port tcp/465.

> If Exim can use whatever qpopper is using for the SSL setup, then that
> would probably solve the problem.

qpopper is using OpenSSL, which I'd like to avoid for exim since exim
links to a gazillion of other libraries and I'd rather not have to
check all their licenses for an OpenSSL exception. Additionally, Simon
is member of the GnuTLS team and surely would not want to advocate
changing to a competitor.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 3221 2323190