The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
34 views

Exim says “The request is invalid” during gnutls_handshake

I have Debian wheezy and setup Exim to listen to port 587, where users can authenticate using TLS. I'm testing it with Thunderbird 31.1.2. When I try to send a message, Thunderbird displays this: ...
0
votes
1answer
39 views

postfix cannot communicate with target server via TLS/SSL

I am able to connect my postfix server with TLS. All things are set up. But when i send a message with this secure connection, target server (for example gmail) receive my message without TLS/SSL ...
-3
votes
1answer
17 views

no STARTTLS in inbound email to exim [closed]

I have a CentOS VPS and I'm using Exim 4.7.2 For some days I have an issue in Thunderbird and in other client because seems STARTTLS not work in incoming email only outgoing e-mail. How can I fix ...
0
votes
0answers
60 views

Perdition IMAP proxy not using STARTTLS with Cyrus IMAP server

I have a Perdition proxy server setup to forward users to one of two Cyrus backend mailstores based on an LDAP query. Everything works fine except for securing the connection between Perdition and ...
11
votes
2answers
313 views

Is it still “wrong” to require STARTTLS on incoming SMTP messages

According to the STARTTLS Spec Section 5: A publicly-referenced SMTP server MUST NOT require use of the STARTTLS extension in order to deliver mail locally. This rule prevents the STARTTLS ...
0
votes
0answers
46 views

ejabberd and LDAP authentication using StartTLS

I am trying to setup ejabberd that authenticates users against an LDAP server. The LDAP server requires all clients to connect via StartTLS (olcSecurity: tls=1). ejabberd's LDAP module does not ...
0
votes
3answers
314 views

Exim after Thunderbird update: “Could not negotiate a supported cipher suite” [closed]

Recently, after I installed updates on my Kubuntu 14.04. system and a new version of thunderbird was installed, I could not send emails any more. It prompts: Sending of message failed. The message ...
0
votes
1answer
180 views

Postfix still complains that “certificate verification failed” even when “smtp_tls_security_level = fingerprint”

I'm attempting to use Postfix (version 2.6.6 on RHEL6) to connect to and send mail via a mail relay on our internal network. I want to connect with STARTTLS on port 25 (port 465 is not available on ...
2
votes
1answer
90 views

How can I enforce TLS in sendmail when I don't necessarily know the hostname of the downstream MTA (only IPs)? [e.g. by recipients' domain]

I'm running SendMail 8.14 and have some custom static routes for sending to certain domains. These domains are "internal" but not managed directly by me. Here's an example of ...
0
votes
0answers
157 views

Unable to get private key, path is correct, file readable

When testing Cyrus IMAPs connection, the connection fails with: May 12 21:03:16 mail cyrus/imaps[25758]: executed May 12 21:03:16 mail cyrus/imaps[25758]: accepted connection May 12 21:03:16 mail ...
0
votes
0answers
129 views

Solaris LDAP client: nss Failure to load dynamic library

On Solaris 10 and 11, I have successfully set PAM_LDAP up. The Solaris host uses a remote LDAP for user authentication. However, I am unable to get TLS working. ldapclient setup I initiate my ...
0
votes
1answer
110 views

SMTP Connection disconnecting after “STARTTLS”

We're having issues with our mail server. Basically some emails from external networks are not being accepted by the mailserver. After some debugging using telnet and looking through the logfiles, it ...
1
vote
1answer
838 views

ejabberd starttls_required in c2s/s2s and disable SSLv3 + unsecure Ciphers

I'm using ejabberd on Ubuntu. My configuration looks like this: {5269, ejabberd_s2s_in, [ {shaper, s2s_shaper}, {max_stanza_size, 131072}, ...
0
votes
0answers
295 views

Storing GPG keys in LDAP with TLS using gpgme

I'm trying to send my GPG public key to our LDAP server, but I'm hitting a wall. My LDAP server only allows LDAP with Start_TLS over port 389, or LDAPS on port 636. I've got the following lines in my ...
7
votes
2answers
5k views

Is STARTTLS more safe than TLS/SSL?

In Thunderbird (and I assume in many other clients, too) I have the option to choose between "SSL/TLS" and "STARTTLS". As far as I understand it, "STARTTLS" means in simple words "encrypt if both ...
1
vote
0answers
173 views

Postfix - SASLAuthentication Problems Cram-MD5 with StartTLS

Recently I configured my mail server which uses Postfix and Courier. Everything works except for the authentication when sending mail via my Postfix server(running on port 587) which has StartTLS ...
0
votes
2answers
4k views

Postfix & Gmail: Authentication Required error

I configured Postfix using this guide. When I send a test E-Mail I get the following error message: May 23 15:36:26 VM11 postfix/smtp[15321]: connect to smtp.gmail.com[2a00:1450:4001:c02::6d]:587: ...
1
vote
1answer
79 views

How can I tell if my LDAP authentications are using StartTLS?

I'm setting up a new OpenLDAP server on Ubuntu 12.04 with a copy of our current LDAP database. I've gotten most of the configuration down, I think, but I'm having trouble telling if the LDAP queries ...
0
votes
0answers
553 views

Can't send mail with TLS enabled

I am receiving the following error when trying to send mail in Thunderbird: "An error occurred sending mail: Unable to establish a secure link with SMTP server smtp.myserver.com using STARTTLS since ...
1
vote
2answers
1k views

Does Exchange 2010 encrypt inbound and outbound email traffic by default?

The higher ups have recently asked about this as I'm sure there are compliance issues that need to be addressed. I was under the assumption that Exchange uses opportunistic TLS or StartTLS to try to ...
0
votes
1answer
2k views

TLS: hostname does not match CN in peer certificate

im trying to connect LDAP over StartTLS but Im stuck with an issue. I've followed step by step this guide https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-tls and LDAP it's ...
4
votes
1answer
732 views

postfix TLS configuration for incoming gmx-mail

I set up my mailserver with postfix 2.7.1 and dovecot 1.2.15 and everything seemed to work just fine, but now I found out that people using @gmx.net addresses cannot send emails to me and rather ...
0
votes
1answer
1k views

postfix, TLS and rapidssl - “verify error:num=19:unable to get local issuer certificate”

I have a certificate from rapidssl. I run this command: openssl s_client -showcerts -connect smtp.server.com:465 I get this error: verify error:num=19:self signed certificate in certificate chain ...
2
votes
2answers
286 views

How do I log tls-encrypted smtp traffic?

I'd like to know what my local postfix says to the Amazon SES smtpd after the STARTTLS. In plain text, so I can understand it. Amazon SES requires TLS, so I can't temporarily turn it off. I currently ...
2
votes
2answers
1k views

SMTP server requires STARTTLS

I am using fetchmial. Below is my configuration. I want the retrieved emails to be sent to my gmail address. But I encountered an error below. Could someone help me with this? Thank you in advance. ...
0
votes
2answers
6k views

Postfix Send Error: Must Issue STARTTLS command

Running Ubuntu 12.04 and trying to configure postfix to relay send and receive through GMAIL. Am running into connection issues particularly with TLS. Have tried a bunch of troubleshooting solutions ...
1
vote
2answers
1k views

How can I ensure Liferay uses TLS for authentication

Please note, this is about communication between Liferay and the LDAP server, not communication between the user's browser and Liferay I'm asking this here since I got zero views (other than my own) ...
5
votes
3answers
237 views

Is a self signed cerificate secure from man in the middle once you have accepted it

I have a mail server that has a self signed SSL certificate. I use Thunderbird to access this server, and it asks me to accept this certificate. So lets say I accept this in a semi secure location, ...
1
vote
2answers
682 views

slapd with STARTTLS only doesn't work

I'm using slapd under Debian/Squeeze and trying to configure the system to only allow TLS-encrypted connections using STARTTLS on port 389. So I've configured my /etc/default/slapd to listen on port ...
-1
votes
1answer
1k views

How secure is using “Normal password” for SMTP with connection type = STARTTLS?

I'm using an email client for the first time - for the most part I've always used gmail via the web interface. Now I'm setting up thunderbird to connect to an email server of my own (on my own server, ...
0
votes
1answer
2k views

lost connection after STARTTLS: Postfix

I've setup a Postfix + Courier server and have a Rails app configured with the SMTP server settings. Whenever the Rails app tries to send an email, this is what appears in the Postfix log (additional ...
1
vote
2answers
348 views

Handling http and https requests using a single port with lihgttpd

At the moment I am using http and https as different port. And based on request uri, I made a redirection rule from http to https switch and vice versa. But If I can use only a single port for https ...