Bug 79799

Summary:	qmail fixcrio is incompatible with TLS
Product:	Gentoo Linux	Reporter:	nuitari
Component:	[OLD] Server	Assignee:	Net-Mail Packages <net-mail+disabled>
Status:	RESOLVED FIXED
Severity:	major
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description nuitari 2005-01-27 20:37:15 UTC

After deciding to test the new qmail ebuild (1.0.3-r16) I have found in the control/conf-smtpd a suggestion to enabled fixcrio. Enabling it unfortunately creates problems as it will cause the TLS to fail.

Example of messages of this happenning:
Jan 25 19:21:01 melchior qmail: 1106698861.337364 delivery 194835: deferral: TLS_not_available:_connect_failed:_error:00000000:lib(0):func(0):reason(0)/

Jan 28 00:30:35 melchior qmail: 1106890235.824305 delivery 6: deferral: TLS_connect_failed;_connected_to_xxx.xxx.xxx.xxx./


Jan 28 00:47:00 melchior qmail: 1106891220.368209 delivery 259: deferral: TLS_connect_failed:_error:0D07209B:asn1_encoding_routines:ASN1_get_object:too_longZConnected_to_xxx.xxx.xxx.xxx_but_connection_died._error:0D07209B:asn1_encoding_routines:ASN1_get_object:too_long_(#4.4.2)/

Removing fixcrio fixes all of these problems.
Probably deactivating TLS on qmail-smtpd will also fix it.
Not having a TLS enabled qmail-remote could also fix it.

At least a warning in conf-smtpd would be helpful.


Reproducible: Always
Steps to Reproduce:
1. Setup 2 qmail servers.
2. Configure a receiver with fixcrio enabled
3. Send an email via qmail on the other machine to the fixcrio enabled one.



Expected Results:  
That the email gets sent properly.

Comment 1 Michael Hanselmann (hansmi) (RETIRED) gentoo-dev

2005-01-28 00:15:32 UTC

I've added a small notice about this to conf-smtpd.