Re: Fatal error during/after TLS negotiation

Simon Horman <[email protected]> Thu, 13 Aug 2009 21:54:31 +1000

Newsgroups	gmane.mail.perdition.user
Message-ID	<[email protected]>

On Thu, Aug 13, 2009 at 08:42:00PM +1000, Simon Horman wrote:
> On Thu, Aug 13, 2009 at 04:38:07AM -0400, Robert C. Sheets wrote:
> > On 8/13/2009 1:53 AM, Simon Horman wrote:
> > > Apologies if I have asked this before, but on which architecture
> > > are you seeing this problem?
> > 
> > This is on x86, in a paravirtualized Xen VM if it matters. The physical 
> > hardware architecture is x86_64. I can try to reproduce the problem in a 
> > 64-bit VM if that would be useful, or even directly on physical hardware.
> 
> I think that should be enough information to work with for now.
> I'll try and set up a similar environment to test the code.

Hi Robert,

I think that I have a solution :-)

The problem is twofold.

1) In order to accept STARTTLS you need to set ssl_mode=tls_listen
   in the perdition configuration file.

2) There is a bug in perdition that causes it to crash
   if it receives STARTTLS but ssl_mode=tls_listen has not been set.

   http://bugs.debian.org/500554

______________________________________________
Perdition-users mailing list
[email protected]
http://lists.vergenet.net/listinfo/perdition-users