Re: encrypted tmda-ofmipd

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Zoran Bosnjak wrote:
> Dear tmda experts,
> please help me with stunnel + ofmipd configuration. I am trying to 
> encrypt smtp communication between client and server.
> 
> When I setup configuration as descriebed in:
> tmda/contrib/ofmipd-stunnel-xinetd, the client is not able to send mail 
> via port 8026. It disconnects with popup error message (actual popup 
> window in Slovenian language):
> "Pri pošiljanju pošte je prišlo do napake: Strežnik je poslal nepravilen 
> pozdrav: 20 buco.home ESMTP tmda-ofmipd + stunnel"
> which means something like:
> "Error sending mail: The Server sent wrong hello message: 20 buco.home 
> ESMTP tmda-ofmipd + stunnel"

I'm honestly not quite sure what's going on, but here are some things to
double-check:

* Make sure your email client is setup for TLS (not SSL.)

* Make sure stunnel is setup for TLS (not SSL). I think that's the
default when proxying SMTP, and it should be how the config files that
you found in TMDA's contrib directory were setup.

* I notice that your server signon message says this:

20 buco.home ESMTP tmda-ofmipd + stunnel

I'll assume that the "20" is really "220" and that was just a typo.

However, where it says "tmda-ofmipd + stunnel", my system says just
"tmda-ofmipd". How did you modify your stunnel configuration to do that?
Can you make stunnel not do that - perhaps the + sign or spaces are
confusing your SMTP client?

* Try using an SSL client application to manually talk to stunnel and
see if that works:

openssl s_client -connect localhost:8026

Hope something there helps!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFk/eqhk3bo0lNTrURAmKsAKDjagMraRT9kqeU4PWe958Q3u8BXQCghwS7
iPIpdv0SJGXsi67p3Xh/fg8=
=eKR3
-----END PGP SIGNATURE-----