RE: Getting TLS working

"Neil Youngman" <[email protected]> Wed, 26 Jan 2005 09:47:53 -0000
Newsgroups gmane.comp.lib.libesmtp
Organization Wirefast Limited
Message-ID <[email protected]>
> On 01/25/2005 05:51:05 PM, Neil Youngman wrote:
> > I'm trying to use libesmtp with TLS and I have been unable to get it
> > working.
> > 
> >  I'm testing with an Exim mail server that is configured 
> for TLS and   
> > offers STARTTLS. If I require TLS my program just sends a quit to   
> > Exim.  If I just enable TLS it tries to send unencrypted. My best  
> > guess is  that  it doesn't like my configuration in some 
> way. I have  
> > the root  certificate in ~/.authenticate/ca.pem and the client  
> > certificate in  ~/.authenticate/private/smtp-starttls.pem. 
> Everything  
> > is readonly.
> > 
> > Am I missing anything? Does the code need anything more than
> > smtp_starttls_enable()?
> > 
> > Are there any keys or pass phrases needed? What else could stop it
> > from initiating a TLS session?
> 
> I assume you test libesmtp-1.0.3r1? Have you run the example 
> program? I  
> think it prints information about all the relevant events occuring  
> during TLS negotiation...

Yes, it is 1.03r1.

I hadn't found the example program, so I've now tried that. It says
"SMTP_EV_NO_CLIENT_CERTIFICATE", so it's not recognising the client
certificate for some reason that is not yet clear to me. 

Neil