Bug#841723: libgnutls30: Can't send mails with STARTTLS per exim

[bs.net]

Hi,

> Can you reproduce this with gnutls-cli?
> (gnutls-cli --starttls-proto=smtp host.name.example.com)

I can reproduce it with gnutls client tool:

gnutls-cli --starttls --port=587 <shost>
Processed 174 CA certificate(s).
Resolving '<shost>'...
Connecting to '<sip>:587'...

- Simple Client Mode:

220 <shost> ESMTP Exim 4.87 Tue, 25 Oct 2016 19:52:51 +0200
EHLO <chost>
250-<shost> Hello <chost> [<cip>]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-STARTTLS
250-PRDR
250 HELP
STARTTLS
220 TLS go ahead
*** Starting TLS handshake
*** Fatal error: An unexpected TLS handshake packet was received.
*** Handshake has failed

> Might this be similar to 835342, caused by old packages or locally
> installed libraries?
> ldd /usr/sbin/exim4


ldd /usr/sbin/exim4
        linux-vdso.so.1 (0x00007ffd97961000)
        libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2 
(0x00007f1406894000)
        libnsl.so.1 => /lib/x86_64-linux-gnu/libnsl.so.1 (0x00007f140667c000)
        libcrypt.so.1 => /lib/x86_64-linux-gnu/libcrypt.so.1 
(0x00007f1406444000)
        libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f1406140000)
        libpam.so.0 => /lib/x86_64-linux-gnu/libpam.so.0 (0x00007f1405f31000)
        libdb-5.3.so => /usr/lib/x86_64-linux-gnu/libdb-5.3.so 
(0x00007f1405b71000)
        libldap_r-2.4.so.2 => /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2 
(0x00007f1405920000)
        liblber-2.4.so.2 => /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2 
(0x00007f1405711000)
        libmysqlclient.so.18 => /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18 
(0x00007f140514b000)
        libpq.so.5 => /usr/lib/x86_64-linux-gnu/libpq.so.5 
(0x00007f1404f1a000)
        libsqlite3.so.0 => /usr/lib/x86_64-linux-gnu/libsqlite3.so.0 
(0x00007f1404c17000)
        libsasl2.so.2 => /usr/lib/x86_64-linux-gnu/libsasl2.so.2 
(0x00007f14049fa000)
        libperl.so.5.24 => /usr/lib/x86_64-linux-gnu/libperl.so.5.24 
(0x00007f1404608000)
        libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f1404404000)
        libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 
(0x00007f14041e7000)
        libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f1403e49000)
        libgnutls.so.30 => /usr/lib/x86_64-linux-gnu/libgnutls.so.30 
(0x00007f1403ae6000)
        libpcre.so.3 => /lib/x86_64-linux-gnu/libpcre.so.3 
(0x00007f1403871000)
        /lib64/ld-linux-x86-64.so.2 (0x0000555e7300e000)
        libaudit.so.1 => /lib/x86_64-linux-gnu/libaudit.so.1 
(0x00007f1403649000)
        libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f140342e000)
        libstdc++.so.6 => /usr/lib/x86_64-linux-gnu/libstdc++.so.6 
(0x00007f14030ad000)
        libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 
(0x00007f1402e96000)
        libssl.so.1.0.2 => /usr/lib/x86_64-linux-gnu/libssl.so.1.0.2 
(0x00007f1402c2c000)
        libcrypto.so.1.0.2 => /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.2 
(0x00007f14027c6000)
        libgssapi_krb5.so.2 => /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2 
(0x00007f140257b000)
        libp11-kit.so.0 => /usr/lib/x86_64-linux-gnu/libp11-kit.so.0 
(0x00007f1402316000)
        libidn.so.11 => /lib/x86_64-linux-gnu/libidn.so.11 
(0x00007f14020e2000)
        libtasn1.so.6 => /usr/lib/x86_64-linux-gnu/libtasn1.so.6 
(0x00007f1401ecf000)
        libnettle.so.6 => /usr/lib/x86_64-linux-gnu/libnettle.so.6 
(0x00007f1401c96000)
        libhogweed.so.4 => /usr/lib/x86_64-linux-gnu/libhogweed.so.4 
(0x00007f1401a61000)
        libgmp.so.10 => /usr/lib/x86_64-linux-gnu/libgmp.so.10 
(0x00007f14017de000)
        libcap-ng.so.0 => /lib/x86_64-linux-gnu/libcap-ng.so.0 
(0x00007f14015d8000)
        libkrb5.so.3 => /usr/lib/x86_64-linux-gnu/libkrb5.so.3 
(0x00007f1401300000)
        libk5crypto.so.3 => /usr/lib/x86_64-linux-gnu/libk5crypto.so.3 
(0x00007f14010d0000)
        libcom_err.so.2 => /lib/x86_64-linux-gnu/libcom_err.so.2 
(0x00007f1400eca000)
        libkrb5support.so.0 => /usr/lib/x86_64-linux-gnu/libkrb5support.so.0 
(0x00007f1400cbe000)
        libkeyutils.so.1 => /lib/x86_64-linux-gnu/libkeyutils.so.1 
(0x00007f1400aba000)
        libffi.so.6 => /usr/lib/x86_64-linux-gnu/libffi.so.6 
(0x00007f14008b1000)

> dpkg -l | grep dmo

dpkg -l | grep dmo
=> empty output

Only package libtpm-unseal1 were removed from testing and is installed.
No outdated packages.

I reverted the exim4 from backup, because I switched to postfix yesterday (to 
resolve the error finally).
Further tests are difficult ;)

cu Sascha