Difference between revisions of "TLS Problems"

Revision as of 15:40, 20 June 2014

We've found that Debian 7's version of OpenSSL has problems interoperating with some other SSL implementations. Here are some things you can try:

Add this to the end of /etc/mail/sendmail.mc:
--> LOCAL_CONFIG

--> dnl # Do not allow SSLv2 and weak ciphers

--> O CipherList=HIGH:MEDIUM:!ADH:!MD5:!SSLv2

--> O ClientSSLOptions=+SSL_OP_NO_TLSv1
After you add the above lines, type:
--> make -C /etc/mail && /etc/init.d/sendmail reload
If that doesn't help, you have to disable TLS with the machine gwmail.bradescoseguros.com.br. Put this lines in /etc/mail/access:
--> Try_TLS:gwmail.bradescoseguros.com.br NO
and again:
--> make -C /etc/mail
If that still does not work, you may have to disable STARTTLS for now by removing
--> include(`/etc/mail/tls/starttls.m4')dnl from sendmail.mc and running:
--> make -C /etc/mail && /etc/init.d/sendmail reload

@@ Line 12: / Line 12: @@
 <li>If that doesn't help, you have to disable TLS with the machine gwmail.bradescoseguros.com.br.   Put this lines in /etc/mail/access:
 :<tt>--> Try_TLS:gwmail.bradescoseguros.com.br	  NO</tt>
-<br>and again:
+and again:
 :<tt>--> make -C /etc/mail</tt>
 <li>If that still does not work, you may have to disable STARTTLS for now by removing
 <br><tt>--> include(`/etc/mail/tls/starttls.m4')dnl from sendmail.mc </tt>
-and running
+and running:
 :<tt>--> make -C /etc/mail && /etc/init.d/sendmail reload</tt>
 </ol>
 <div style="float:right; clear:both; margin-right:0.5em">[[Support Wiki | [Home]]]</div>
 [[category:All]][[category:Security]]