Can't Accept email with TLS

[vtx624]

Zimbra,

I am having problems accepting emails via tls from microsoft.

Here are what the logs say

Jul  6 14:44:45 mail-1 postfix/smtpd[9266]: connect from smtp.mssupport.microsoft.com[131.107.1.44]
Jul  6 14:44:45 mail-1 postfix/smtpd[9266]: setting up TLS connection from smtp.mssupport.microsoft.com[131.107.1.44]
Jul  6 14:44:45 mail-1 postfix/smtpd[9266]: SSL_accept error from smtp.mssupport.microsoft.com[131.107.1.44]: -1
Jul  6 14:44:45 mail-1 postfix/smtpd[9266]: lost connection after STARTTLS from smtp.mssupport.microsoft.com[131.107.1.44]
Jul  6 14:44:45 mail-1 postfix/smtpd[9266]: disconnect from smtp.mssupport.microsoft.com[131.107.1.44]

Im not sure if this is related, but when i restart my mail server I get this error

"Unable to determine enabled services from ldap"

also I am running my setup on DRBD


I have checked
vi /etc/host

127.0.0.1       localhost.localdomain localhost
10.1.200.14     mail-1.example.com        mail-1
10.1.200.15     mail-2.example.com        mail-2
10.1.200.14     mail.example.com          mail

Here are my dig results

; <<>> DiG 9.3.4-P1.1 <<>> mx example.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60662
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 2

;; QUESTION SECTION:
;example.com.             IN      MX

;; ANSWER SECTION:
example.com.      2592000 IN      MX      10 mail.example.com.


;; AUTHORITY SECTION:
example.com.      2592000 IN      NS      mail-2.example.com.

;; ADDITIONAL SECTION:
mail.example.com. 2592000 IN      A       10.1.200.13

host `hostname`

mail-1.example.com has address 10.1.200.14

Any help would be appreciated.

Thanks

[jwhitaker]

We are network edition and having the same problem as described here. Continuing to work with support but no luck so far. Not able to send mail with TLS or SSL, but can POP with SSL fine. Mailman server also cannot connect to Zimbra with same "lost TLS" issue. Using Thawte commercial certificate and supplied CA root cert file, also have followed this article about "too many files":

Error (MTA): Unable to set STARTTLS - Zimbra :: Wiki

Continue to see this error:

Aug 3 04:07:19 mail postfix/smtpd[3038]: warning: network_biopair_interop: error writing 8192 bytes to the network: Connection reset by peer
Aug 3 04:07:19 mail postfix/smtpd[3038]: SSL_accept error from localhost.localdomain[127.0.0.1]: -1
Aug 3 04:07:19 mail postfix/smtpd[3038]: lost connection after STARTTLS from localhost.localdomain[127.0.0.1]

Suspect that we have same issue as this post:

TLS-Connection - Broken Pipe network_biopair_interop

Anyone having any luck?

[jwhitaker]

If you followed this post which has a trick to use the curl root certs bundle:

http://www.zimbra.com/forums/newrepl...uote=1&p=80428

that may be your issue. See post at the bottom of that article to see if it matches your situation.

[adeelarifbhatti]

Not so sure, but over SSL or TLS authentication is necessary before delivering emails.
May be this is your issue

Regards
Adeel