Bug#482404: A TLS packet with unexpected length was received when receiving mail from MS Exchange 2003

[José Miguel Robles]

> Please, don't judge from a _very_ generic error message (the one in
> this bug's subject is almost the most generic error message that
> GnuTLS can create) that all problems are the same.

E pur si muove. When I activate all the certificates in ca-certificates
(in my Debian distro dpkg-reconfigure ca-certificates), and I try to
send an encrypted message from my WXP (Exchange Outlook 2003) box through 
my Linux-Debian-Exim mail server, I see in geximon:

23:20:36 TLS error on connection from (XXXXXXX) [XXX.XXX.XXX.XXX] (gnutls_handshake): A TLS packet with unexpected length was received.

and the Exchange says that there is an error in the SSL/TLS connection,
keeping the message in the output tray.

When I reconfigure once again ca-certificates eliminating almost all of
the certificates included in the package, geximon shows:

23:35:16 1KywOh-0000aZ-D6 SA: Debug: SAEximRunCond expand returned: '1'
23:35:16 1KywOh-0000aZ-D6 SA: Debug: check succeeded, running spamc
23:35:17 1KywOh-0000aZ-D6 SA: Action: scanned but message isn't spam: score=-1.3 required=5.0 (scanned in 1/1 secs | Message-Id: 7B058F34BC4F495699411DA231E86B93 at xxx.xx). From <xxxx at xxx.xxx> (host=NULL [xxx.xxx.xxx.xxx]) for xxx at xxx.xx
23:35:17 1KywOh-0000aZ-D6 <= xxxxx at xxxx.xxx H=(xxxxxxx) [xxx.xxx.xxx.xxx] P=esmtpsa X=TLS1.0:RSA_ARCFOUR_MD5:16 DN="" A=login_server:xxx S=3969 id=xxx at xxx.xx
23:35:18 1KywOh-0000aZ-D6 => xxx at xxx.xx R=dnslookup T=remote_smtp H=mx.xxx.xxx.xxx [xxx.xxx.xxx.xxx] X=TLS1.0:RSA_AES_256_CBC_SHA1:32 DN="C=US,O=RTFM\, Inc.,OU=Widgets Division,CN=localhost"
23:35:18 1KywOh-0000aZ-D6 Completed

As you can see, the message is scanned an sent to the destination; in the WXP box 
the message is shown as sent.

Best Regards,

José Miguel

================================
José Miguel Robles Román
Tres Cantos - Spain
Southish by vocation