View Single Post
  #1 (permalink)  
Old 11-30-2006, 01:06 PM
3RiversTechAdmin 3RiversTechAdmin is offline
Special Member
 
Posts: 100
Unhappy TLS not working?

Hey everyone,
Sorry this is a repost, but I had no response on the admin board.

I am having a problem with SMTP with TLS,
I can send messages with useing SMTP with no TLS just fine, but when I enable it, Thunderbird complains:
Quote:
Sending of message failed.

An error occurred sending mail: Unable to connect to SMTP server
via STARTTLS since it doesn't offer STARTTLS In EHLO reponse. Please verify that your
Mail/News account settings are correct and try again.
and I see this in the zimbra.log
Quote:
Nov 30 13:41:00 localhost postfix/smtpd[7432]: connect from unknown[192.168.X.XX]
Nov 30 13:41:04 localhost postfix/smtpd[7608]: warning: cannot get certificate from file /opt/zimbra/conf/smtpd.crt
Nov 30 13:41:04 localhost postfix/smtpd[7608]: warning: TLS library problem: 7608:error:02001002:system library:fopen:No such file or directory:bss_file.c:278:fopen('/opt/zimbra/conf/smtpd.crt','r'):
Nov 30 13:41:04 localhost postfix/smtpd[7608]: warning: TLS library problem: 7608:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:280:
Nov 30 13:41:04 localhost postfix/smtpd[7608]: warning: TLS library problem: 7608:error:140DC002:SSL routines:SSL_CTX_use_certificate_chain_file:system lib:ssl_rsa.c:760:
Nov 30 13:41:04 localhost postfix/smtpd[7608]: cannot load RSA certificate and key data
...
Nov 30 13:41:11 localhost postfix/smtpd[7432]: lost connection after STARTTLS from unknown[192.168.X.XX]
Nov 30 13:41:11 localhost postfix/smtpd[7432]: disconnect from unknown[192.168.X.XX]
Also, the above was all internal, my server is currently using the old mail server as a relay host. When I attempt to telnet into 25 on the new server it will work locally, but not from the outside. If I do a port scan my port 25 appears to be open. Any ideas on these issues your sincerely be appreciated.

P.S. My certs right now match hostname.domainname.com, but I want them to be for mail.domainname.com, has anyone done this before?
Reply With Quote