Re: tmda-ofmipd and SSL

Sabahattin Gucukoglu wrote:
> Hi all,
> 
> However I slice it, I can't make tmda-ofmipd's internal TLS/SSL
> support work.  I get the log below.  As soon as the client says EHLO,
> ofmipd kills the connection and spews, even when direct SSL is used
> to offer the banner, inside the TLS session (--ssl), which is visible
> to openssl s_client.  I've seen this somewhere else before in
> archives, but not the solution.  I'm using Python 2.5 and the patched
> tlslite package, as well as have installed auxiliary packages that it
> wants (pycrypto and others).

I don't know what tlslite patch you are referring to, but as far as I 
know it simply doesn't work with Python 2.5. The addition of the 
GeneratorExit exception type clashes with tlslite's very poor error 
handling. As a result a common and normal occurrence, the completion of 
a generator, is detected as a generic error and kills the connection. I 
explained this more thoroughly in this message:

http://thread.gmane.org/gmane.mail.spam.tmda.devel/6820

The error in your message appears to be identical to the error in my 
message. There's not enough information to be sure, but I think it's a 
safe bet the problem is exactly the same.

This, along with other shortcomings of the tlslite package, is one of 
the primary reasons I updated TMDA with OpenSSL support:

http://wiki.github.com/KevinGoodsell/tmda-fork/

-Kevin

------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
tmda-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tmda-users