Bug#221689: [Pkg-openssl-devel] Bug#221689: Is this a MUCH bigger problem?

[Kurt Roeckx]

On Sat, Sep 23, 2006 at 12:43:45AM -0400, Ian Zimmerman wrote:
> 
> Is this really just a problem with the s_client program, or with libssl?
> In other words, will any smtp client linked with libssl show this broken
> behaviour?  If this is the case it means Exim is pretty much useless as
> an encrypted SMTP server :-(

This is about "openssl s_client", and not about anything else.  s_client
is just a diagnostics program you can tests things.  It can be used for
testing an SMTP server, but it doesn't properly act as an SMTP client.
exim seems to be right in saying that openssl's s_client is broken and
that it shouldn't send STARTTLS when it's not advertised yet.

Also note that exim in debian is linked to gnutls, not to libssl.


Kurt