Bug#402861: exim4-daemon-heavy: A TLS fatal alert has been received.: Bad record MAC

[Tasha Zita]

On Mon, 02 Oct 2006 19:39:09 +0200 Stian Jordet <stian at jordet.net> wrote:
> Package: exim4-daemon-heavy
> Version: 4.63-4
> Severity: normal
>
>
> Another one of those beloved tls-bugs. I recently got myself a
> SonyEricsson P990 smart phone. When trying to send mail with tls (the
> same happens using ssl on port 465), the phone asks me to accept the
> certificate, and then says "Secure session failed". I get this in my
> Exim log:
>
> 2006-10-02 18:49:23 SMTP connection from [192.168.1.8]:59691
I=[193.91.240.190]:25 (TCP/IP connection
> count = 1)
> 2006-10-02 18:49:23 no host name found for IP address 192.168.1.8
> 2006-10-02 18:49:27 TLS recv error on connection from
[192.168.1.8]:59691: A TLS fatal alert has been
> received.: Bad record MAC
> 18:49:27 TLS send error on connection from [192.168.1.8]:59691: The
specified session has been
> invalidated for some reason.
>
> TLS works fine with Thundebird and Evolution, and did work fine with
> my previous smart phone (SE P910), so this may sound like a phone bug.
> _But_ when I try to send with tls through a sendmail server, it works
> fine. I suspect that this is due to the fact that sendmail uses
> openssl, and exim gnutls, but I have no evidence of that.
>
> The error message isn't very helpful neither ("for some reason").
>
> Any insight?
>
> Best regards,
> Stian
>
> -- Package-specific info:
> Exim version 4.63 #1 built 01-Oct-2006 14:42:48
> Copyright (c) University of Cambridge 2006
> Berkeley DB: Sleepycat Software: Berkeley DB 4.3.29: (September  6, 2005)
> Support for: crypteq iconv() IPv6 PAM Perl GnuTLS move_frozen_messages
Content_Scanning Old_Demime
> Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb
dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql
> Authenticators: cram_md5 cyrus_sasl plaintext spa
> Routers: accept dnslookup ipliteral iplookup manualroute queryprogram
redirect
> Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
> Fixed never_users: 0
> Size of off_t: 8
> Configuration file is /etc/exim4/exim4.conf
>
> -- System Information:
> Debian Release: testing/unstable
>   APT prefers unstable
>   APT policy: (500, 'unstable')
> Architecture: i386 (i686)
> Shell:  /bin/sh linked to /bin/bash
> Kernel: Linux 2.6.18
> Locale: LANG=no_NO, LC_CTYPE=no_NO (charmap=ISO-8859-1)
>
> Versions of packages exim4-daemon-heavy depends on:
> ii  exim4-base              4.63-4           support files for all exim
MTA (v4
> ii  libc6                   2.3.6.ds1-4      GNU C Library: Shared
libraries
> ii  libdb4.3                4.3.29-6         Berkeley v4.3 Database
Libraries [
> ii  libgnutls13             1.4.4-1          the GNU TLS library -
runtime libr
> ii  libldap2                2.1.30-13+b1     OpenLDAP libraries
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnutls-maint/attachments/20260425/8a00cad7/attachment.htm>