[Pkg-exim4-users] How to get around "Must issue a STARTTLS command first"

[Marc Haber]

Hi,

On Mon, Aug 02, 2010 at 10:41:24AM +0900, Norbert Preining wrote:
> On Sa, 31 Jul 2010, Marc Haber wrote:
> > Try 
> > echo foo | exim -d mh+pkg-exim4-users at zugschlus.de
> > and send the output to the list. Exim will asterisk out the password,
> > so there is no private data in the debug output.
> 
> (First of all, good that I checked, it did *NOT*!!!! asterix out the
> password. *I* did change the real passwd to ******* below:

*argh* Sorry, I only looked into the smtp dialog and was wrongly
satisfied that I only saw asterisks there. I apologize. Good that you
checked, indeed.

> Thanks for the hint, the problem is here, I guess I don't have to
> send the full log:
> initialized certificate stuff
> initialized GnuTLS session
> LOG: MAIN
>   TLS error on connection to smtp.jaist.ac.jp [150.65.19.12] (gnutls_handshake): A TLS packet with unexpected length was received.
> ok=0 send_quit=0 send_rset=1 continue_more=0 yield=1 first_address is not NULL
> 150.65.19.12 in hosts_require_tls? no (option unset)
> LOG: MAIN
> 
> Then it continues with un-protected delivery (I don't have it
> in hosts_requrire_tls fo rnow, will add it later), and 
> breaks down with the known problem.

Indeed.

> So now I don't know where to go from here ...

Try reducing the number of accepted root certificates in the
ca-certificates package (dpkg-reconfigure).

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 3221 2323190