tmda-ofmipd and SSL

Sabahattin Gucukoglu <[email protected]> Sun, 14 Mar 2010 18:35:05 +0000
Newsgroups gmane.mail.spam.tmda.user
Message-ID <[email protected]>
Hi all,

However I slice it, I can't make tmda-ofmipd's internal TLS/SSL support work.  I get the log below.  As soon as the client says EHLO, ofmipd kills the connection and spews, even when direct SSL is used to offer the banner, inside the TLS session (--ssl), which is visible to openssl s_client.  I've seen this somewhere else before in archives, but not the solution.  I'm using Python 2.5 and the patched tlslite package, as well as have installed auxiliary packages that it wants (pycrypto and others).

Does anybody know what the fix is?  Right now I'm living without SSL and using CRAM-MD5 to safeguard the password (using another one than the IMAP login, just in case).  I could, I suppose, switch to using stunnel with the SMTP fixup if required, but that would suck.

Cheers,
Sabahattin

Spew begins to EOM for tmda-ofmipd -f -d --ssl --ssl-cert-file=... --ssl-key-file=...:

********************************************************************** 
WARNING: The security implications and risks of running /usr/local/bin
/tmda-ofmipd in "seteuid" mode have not been fully evaluated.  If you
are uncomfortable with this, quit now and instead run /usr/local/bin
/tmda-ofmipd under your non-privileged TMDA user account. 
********************************************************************** 

tmda-ofmipd started at Sun, 14 Mar 2010 16:12:33 +0000
	Listening on Mintaka:8025
Incoming connection from: ('62.31.227.19', 47609)
Incoming connection to: ('173.203.201.199', 8025)
Data: 'ehlo someclient'
error: uncaptured python exception, closing channel <__main__.SMTPSession connected 62.31.227.19:47609 at 0x2cc3488> (<type 'exceptions.ValueError'>: [/usr/lib/python2.5/asyncore.py|read|68] [/usr/lib/python2.5/asyncore.py|handle_read_event|390] [/usr/local/bin/tmda-ofmipd|handle_read|1285] [/usr/lib/python2.5/site-packages/tlslite/integration/AsyncStateMachine.py|inReadEvent|132] [/usr/lib/python2.5/site-packages/tlslite/integration/AsyncStateMachine.py|_doReadOp|177] [/usr/local/bin/tmda-ofmipd|outReadEvent|1312] [/usr/lib/python2.5/asynchat.py|handle_read|137] [/usr/local/bin/tmda-ofmipd|found_terminator|222] [/usr/local/bin/tmda-ofmipd|smtp_EHLO|463] [/usr/local/bin/tmda-ofmipd|push|189] [/usr/lib/python2.5/asynchat.py|push|160] [/usr/lib/python2.5/asynchat.py|initiate_send|219] [/usr/
 local/bin/tmda-ofmipd|send|1331] [/usr/lib/python2.5/site-packages/tlslite/integration/AsyncStateMachine.py|setWriteOp|231] [/usr/lib/python2.5/site-packages/tlslite/integration/AsyncStateMachine.py|_doWriteOp|181] [/usr/lib/python2.5/site-packages/tlslite/TLSRecordLayer.py|writeAsync|254])

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
tmda-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tmda-users