Bug#459323: exim4: Incredimail problem sending email using Exim4 SMTP over SSL / TLS error on connection from [ip.ad.dr.ess] (gnutls_handshake): A TLS packet with unexpected length was received.

[Andrew McGlashan]

Hi,

Simon Josefsson wrote:
> openssl s_server -accept 4465 -debug -msg

www:~# openssl s_server -accept 4465 -debug -msg
Error opening server certificate private key file server.pem
8687:error:02001002:system library:fopen:No such file or 
directory:bss_file.c:352:fopen('server.pem','r')
8687:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:
unable to load server certificate private key file

> and try IM on port 4465 against it.  And also try:
>
> gnutls-serv --port 4465 --debug 4711

www:~# gnutls-serv --port 4465 --debug 4711
Echo Server ready. Listening to port '4465'.

|<7>| READ: Got 5 bytes from 5
|<7>| READ: read 5 bytes from 5
|<7>| 0000 - 80 4c 01 03 01
|<7>| RB: Have 0 bytes into buffer. Adding 5 bytes.
|<7>| RB: Requested 5 bytes
|<4>| REC[8070cf0]: V2 packet received. Length: 76
|<4>| REC[8070cf0]: Expected Packet[0] Handshake(22) with length: 1
|<4>| REC[8070cf0]: Received Packet[0] Handshake(22) with length: 76
|<7>| READ: Got 73 bytes from 5
|<7>| READ: read 73 bytes from 5
|<7>| 0000 - 00 33 00 00 00 10 00 00 04 00 00 05 00 00 0a 01
|<7>| 0001 - 00 80 07 00 c0 03 00 80 00 00 09 06 00 40 00 00
|<7>| 0002 - 64 00 00 62 00 00 03 00 00 06 02 00 80 04 00 80
|<7>| 0003 - 00 00 13 00 00 12 00 00 63 7d 3c 1c 87 9d 8c fb
|<7>| 0004 - 50 fe 8e 10 c8 29 d2 32 af
|<7>| RB: Have 5 bytes into buffer. Adding 73 bytes.
|<7>| RB: Requested 78 bytes
|<4>| REC[8070cf0]: Decrypted Packet[0] Handshake(22) with length: 76
|<6>| BUF[HSK]: Inserted 76 bytes of Data(22)
|<6>| BUF[REC][HD]: Read 1 bytes of Data(22)
|<3>| HSK[8070cf0]: CLIENT HELLO(v2) was received [76 bytes]
|<6>| BUF[REC][HD]: Read 75 bytes of Data(22)
|<6>| BUF[HSK]: Peeked 0 bytes of Data
|<6>| BUF[HSK]: Emptied buffer
|<6>| BUF[HSK]: Inserted 1 bytes of Data
|<6>| BUF[HSK]: Inserted 75 bytes of Data
|<3>| HSK[8070cf0]: SSL 2.0 Hello: Client's version: 3.1
|<3>| HSK[8070cf0]: Parsing a version 2.0 client hello.
|<2>| ASSERT: gnutls_handshake.c:2674
|<3>| HSK[8070cf0]: Removing ciphersuite: ANON_DH_ARCFOUR_MD5
|<2>| ASSERT: gnutls_handshake.c:2674
|<3>| HSK[8070cf0]: Removing ciphersuite: ANON_DH_3DES_EDE_CBC_SHA1
|<2>| ASSERT: gnutls_handshake.c:2674
|<3>| HSK[8070cf0]: Removing ciphersuite: ANON_DH_AES_128_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: PSK_SHA_ARCFOUR_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: PSK_SHA_3DES_EDE_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: PSK_SHA_AES_128_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: DHE_PSK_SHA_ARCFOUR_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: DHE_PSK_SHA_3DES_EDE_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: DHE_PSK_SHA_AES_128_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: SRP_SHA_3DES_EDE_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: SRP_SHA_AES_128_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: SRP_SHA_DSS_3DES_EDE_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: SRP_SHA_RSA_3DES_EDE_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: SRP_SHA_DSS_AES_128_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: SRP_SHA_RSA_AES_128_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: DHE_DSS_ARCFOUR_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: DHE_DSS_3DES_EDE_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: DHE_DSS_AES_128_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: DHE_RSA_3DES_EDE_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: DHE_RSA_AES_128_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: RSA_EXPORT_ARCFOUR_40_MD5
|<3>| HSK[8070cf0]: Removing ciphersuite: RSA_ARCFOUR_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: RSA_ARCFOUR_MD5
|<3>| HSK[8070cf0]: Removing ciphersuite: RSA_3DES_EDE_CBC_SHA1
|<3>| HSK[8070cf0]: Removing ciphersuite: RSA_AES_128_CBC_SHA1
|<2>| ASSERT: gnutls_handshake.c:632
|<2>| ASSERT: gnutls_v2_compat.c:181
|<2>| ASSERT: gnutls_handshake.c:1952
|<2>| ASSERT: gnutls_handshake.c:2415
|<6>| BUF[HSK]: Cleared Data from buffer
Error in handshake
Error: Could not negotiate a supported cipher suite.
|<4>| REC: Sending Alert[2|40] - Handshake failed
|<4>| REC[8070cf0]: Sending Packet[0] Alert(21) with length: 2
|<7>| WRITE: Will write 7 bytes to 5.
|<7>| WRITE: wrote 7 bytes to 5. Left 0 bytes. Total 7 bytes.
|<7>| 0000 - 15 03 01 00 02 02 28
|<4>| REC[8070cf0]: Sent Packet[1] Alert(21) with length: 7
|<2>| ASSERT: gnutls_record.c:242
Exiting via signal 2
www:~#

Kind Regards
AndrewM

Andrew McGlashan
Broadband Solutions now including VoIP