[Pkg-exim4-users] How to get around "Must issue a STARTTLS command first"

Andreas Metzler ametzler at downhill.at.eu.org
Wed Aug 4 18:20:14 UTC 2010

On 2010-08-04 Marc Haber <mh+pkg-exim4-users at zugschlus.de> wrote:
> On Wed, Aug 04, 2010 at 03:46:32PM +0900, Norbert Preining wrote:
> > So I have removed all but one entry in 
> > 	/etc/ssl/certs/ca-certificates.crt
> > but still I get:
> > 	(gnutls_handshake): A TLS packet with unexpected length was received.

> > Anything else I could try?

> You could try reproducing the issue with gnutls-cli-debug and see
> whether this gives any insight. I'm beginning  to run out of clues;
> Andreas is much more familiar with GnuTLS than I am.


the server also supports ssl-smtp on 465 with eases debugging. Since
gnutls-cli --priority NORMAL:%COMPAT -p 465 smtp.jaist.ac.jp
succeeds where
gnutls-cli -p 465 smtp.jaist.ac.jp
fails I think that setting exim's main configuration setting
gnutls_compat_mode (available since 4.70) should help you.

cu andreas

More information about the Pkg-exim4-users mailing list