Re: test Mon, 16 Jun 2025 17:35:47 -0500
Viktor Dukhovni via Exim-users <[email protected]>
| Newsgroups | gmane.mail.exim.user |
|---|---|
| Message-ID | <[email protected]> |
On Tue, Jun 17, 2025 at 08:16:22AM +0200, Cyborg via Exim-users wrote:
> Am 17.06.25 um 05:11 schrieb Viktor Dukhovni via Exim-users:
> > posttls-finger: < 220 begin TLS negotiation
> > posttls-finger: server certificate verification failed for smtp.altice.prod.cloud.openwave.ai[66.179.105.209]:587: num=62:hostname mismatch
> > posttls-finger: smtp.altice.prod.cloud.openwave.ai[66.179.105.209]:587: subject_CN=imap.suddenlink.net, issuer=Sectigo RSA Organization Validation Secure Server CA, cert fingerprint=90:EA:CA:AB:A8:94:EF:93:BB:26:77:37:3D:15:41:B8:59:65:C2:EA:71:3E:11:1D:72:BE:78:3A:39:3A:EF:22, pkey fingerprint=A3:C6:77:95:74:22:F0:99:FE:6C:E7:A5:68:AE:66:AE:B5:CF:66:C2:03:03:E0:3E:32:FF:18:D6:3E:36:4B:00
> > posttls-finger: Untrusted TLS connection established to smtp.altice.prod.cloud.openwave.ai[66.179.105.209]:587: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
> >
>
> because the cert name is "imap.suddenlink.net" and not
> "smtp.altice.prod.cloud.openwave.ai" but thats not the major issue here:
> Certificate chain
> 0 s:C=US, ST=New York, O=Altice USA, Inc., CN=imap.suddenlink.net
> i:C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo
> RSA Organization Validation Secure Server CA
> a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
> v:NotBefore: Apr 15 00:00:00 2024 GMT; *NotAfter: Apr 15 23:59:59 2025
> GMT*
It seems you might not have read the rest of my post. The list of names
is actually:
> > imap.suddenlink.net
> > imap.suddenlinkmail.com
> > mail.suddenlinkmail.com
> > pop.suddenlink.net
> > pop.suddenlinkmail.com
> > smtp.suddenlink.net
> > smtp.suddenlinkmail.com
Any one of which would work, were it not for the also noted fact that
certificate expired.
> > However, there's another problem, the server's certificate is expired:
> >
> > Not After : Apr 15 23:59:59 2025 GMT
> >
> > So the provider has some work to do...
> We have June 2025 : The cert has run out.
Indeed it has.
--
Viktor.
--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## [email protected]
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/