Bug#517394: exim4-daemon-heavy: Incoming connection fails with "(gnutls_handshake): A TLS fatal alert has been received."

[Rasmus Bøg Hansen]

Andreas Metzler skrev:
> On 2009-02-27 Rasmus Bøg Hansen <rasmus at msconsult.dk> wrote:
>> Package: exim4-daemon-heavy
>> Version: 4.69-9
>> Severity: normal
> 
> 
>> In Lenny, incoming connection from one server (only) fails with the
>> following error message:
> 
>> 2009-02-27 09:36:56 TLS error on connection from mail.example.com (example.com) [1.1.1.1] (gnutls_handshake): A TLS fatal alert has been received.
> [...]
> 
>> Disabling TLS for this particular host (see below) apparently fixes
>> the problem but I see it as a workaround and not a real solution.
> 
>> I am unsure how to proceed now (I have no control of the remote
>> server whatsoever), but I will gladly debug, help and provide
>> information on this.
> [...]
> 
> Could you doublecheck whether disabling certificate verification works
> as a workaround?
> MAIN_TLS_VERIFY_CERTIFICATES = /dev/null

This does indeed fix the problem!

My mail server's certificates are self-signed - could this be the problem?

I don't know if the remote server's certificate is self-signed - I am 
unsure how to check this.

Regards
/Rasmus

-- 
Rasmus Bøg Hansen
MSC Aps
Bøgesvinget 8
2740 Skovlunde
44 53 93 66