[Pkg-openssl-devel] Bug#338006: Postfix problem still there

[Martin Sebald]

Hello Kurt,

>> will/could the changes in 0.9.8a-7 have any effect on the postfix issues
>> I'm experiencing? Is it worth a try? 
> A new postfix version has been uploaded to unstable, which has as
> changelog entry:
> * New upstream, fixes various TLS/SASL bugs.
> I suggest you try that.

Thank you for this information. Postfix unstable 2.2.9 up and running,
activated tls stuff in configuration again.

I'll keep you up to date, but this will take one or two days until I see if
the errors won't appear again.

If the errors stay I will try the things you mentioned here:

>> will/could the changes in 0.9.8a-7 have any effect on the postfix issues
>> I'm experiencing? Is it worth a try? 
> It might be. It seems that postfix is using the BIO interface, so it
> might be your problem. It never hurts to check, so we can rule things out.
>> If you need any detailed information about the postfix configuration I'm
>> running I will be happy to hand it over to you. 
> What I need is a way to reproduce it.  I don't think having your setup is
> going to help me, but feel free to send me the details. Maybe I should
> look at setting up postfix with ssl myself. 
> Can you reproduce it when using s_client?
> Like:
> openssl s_client -starttls smtp -crlf -connect localhost:25 -bugs -no_ssl2
> Try playing with some options, like adding -ssl3/-no_ssl3 or -tls1.  Also
> see man s_client(1). 
> Also try the same thing several times, it might work with some luck, and
> might fail the next time. 

Regards,
Martin