Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a recently installed Ubuntu (natty) server, with a domain pointed to it. The mail for this domain is handled by Google Apps (via MX dns records pointing to Google's mail servers).

Now, I've installed logcheck, and am periodically getting emails (via logcheck) about the following log entries:

Jun 17 15:02:06 nattybox sm-mta[26023]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1/SSLv3, verify=FAIL, cipher=RC4-SHA, bits=128/128
Jun 17 13:02:07 nattybox sm-mta[8533]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1/SSLv3, verify=FAIL, cipher=RC4-SHA, bits=128/128
Jun 17 13:17:45 nattybox sm-mta[10465]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1/SSLv3, verify=FAIL, cipher=RC4-SHA, bits=128/128
Jun 17 13:51:56 nattybox sm-mta[14995]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1/SSLv3, verify=FAIL, cipher=RC4-SHA, bits=128/128
Jun 17 12:02:06 nattybox sm-mta[32143]: STARTTLS=client, relay=aspmx.l.google.com., version=TLSv1/SSLv3, verify=FAIL, cipher=RC4-SHA, bits=128/128

It looks like sendmail is trying to use the google mail servers as a relay, which I guess is failing? I installed sendmail via aptitude, and am using the configuration files that came with it. To be clear, sendmail seems to be working in that messages sent from this server get delivered just fine.

Are the above log messages something I should be concerned about, and if so, how would I go about fixing it?

share|improve this question

2 Answers 2

up vote 4 down vote accepted

The logging that you posted is just showing the attempted establishment of TLS over SMTP between your Sendmail and Google's server and nothing more. If your Sendmail is able to send to other addresses fine, then it is probably functioning.

You might send something to a non-Google address to examine its header. That will provide some quick answers to how your SMTP routing may be setup, in lieu of or in support of the rest of your Sendmail logs...

share|improve this answer

Yes this is only basically a warning and most likely your email is getting through. You probably can get rid of the message by adjusting your mail configuration file to NOT attempt to use SSL/TLS security in mail transmission. If I recall in a sendmail configuration it was a single line.

share|improve this answer
2  
The "verify=FAIL" portion of the TLS connect result/status is typically associate with the certificate used to secure the connection. In most cases when a self-signed certificate is used, its certification chain can not be verified with a known/trusted CA, hence the warning. –  user48838 Jun 17 '11 at 23:26
    
@user48838 thanks - old post, but exactly what I was looking for - swapping the cert removed the warning. –  PassKit Feb 24 '13 at 16:14
    
Cool. Glad it worked out for you. –  user48838 Mar 2 '13 at 9:23

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.