From: markus schnalke <meillo@marmaro.de>
  To  : Pierre Frenkiel <pierre.frenkiel@laposte.net>
  Date: Fri, 27 Mar 2009 10:24:11 +0100

Re: openssl problem (was: [masqmail] is this list still active?)

[2009-03-20 15:15] Pierre Frenkiel <pierre.frenkiel@laposte.net>
> On Mon, 2 Feb 2009, markus schnalke wrote:
> 
> >I definately want to have a look at it. If you did not receive an
> >email from me about the problem until March, please tell me again.
> 
> I hope your thesis presentation was successful, and that your are now
> a doctor...

Everything went well and I have my diploma (not my doctor) now. If
you're interested, you can find the thesis and a presentation on
	http://marmaro.de/docs/diploma/

> Did you have some time to look at the masqmail problem?

Unfortunately, I delayed your problem again and again :-(
However, now I had a look at it.


The problem description from your first mail:
> 
> I'm trying to use masqmail to send mails via ESMTP / SSL (port 465) 
> 
> I filled the fields auth name, auth login, auth secret, and wrapper: 
> wrapper = "/usr/bin/openssl s client -quiet -connect 
> srelay.in2p3.fr:465 2>/dev/null" 
> 
> and I get, when trying to send a mail from outside the in2p3.fr 
> domain, the following error: 
> 
> got unexpected response: depth=0 /C=FR/O=CNRS/OU=USR6402/ 
> CN=srelay.in2p3.fr /emailAddress=user@example.com

I figured out that this is the first reply line of
	/usr/bin/openssl s client -quiet -connect srelay.in2p3.fr:465
(That means without the stderr redirect.)

The instant guess is that the stderr redirect gets ignored. I'll have
a look into the source for this. How do you receive this error? I
guess it's in the log. Could you please send the log file (the part
around the message) to me. (Remove sensitive data.)


> PS: this server is supposed to be used from anywhere(relaying),
> but with my present config, it works only from inside the
> in2p3.fr domain.

I don't understand the different behavior between inside and outside
the domain, because if you use the same masqmail route, the message
should be appear, too.

Could you please run the (above mentioned) openssl command (without
the stderr redirect) within and outside of the domain and post the
output, so I can compare.


meillo


P.S.
Please send copies of further mails also to the mailing list.

signature.asc