openssl

[Bryan Blackburn]

On Mon, Jul 13, 2009 at 12:19:47PM -0700, Scott Haneda said:
[...]
> >
> >Some addresses working and others not, that doesn't sound like an
> >initial
> >connection issue (which would implicate SSL/TLS) but something
> >after that.
> >By 'fails the SSL parts entirely' what exactly do you mean, does it
> >fail to
> >finish the initial TCP handshake, fail to verify the cert,
> >something else?
> 
> I wish I knew.  This is hard one for me to debug.  Basically, an
> email from the outside world comes in, hits the proxy on port 25, and
> all I see in the ASSP logs is "starting SSL connection" and "SSL
> connection failed, problem with MTA?". Not exact verbiage, but the
> basics are the same.
> 
> Some cases I can get this to happen with a machine I am in control
> of, so I can look at the logs on that sending machine.  I just get a
> dropped connection, and the mail is queued up and will be tried again
> later.  Curiously, in 5 hours or so, they can sometimes make it
> through.

Hmm, so intermittent then?  That makes things much more difficult to pin
down...

[...]
> 
> I downloaded the source in order to get the examples directory.  I
> then ran this
> 
> $/opt/local/bin/perl5.8 ssl_server.pl
> unable to create socket: IO::Socket::INET configuration failederror:
> 00000000:lib(0):func(0):reason(0)
> 
> Am I doing something wrong, how were you able to get that to work?

That was all I did to run it; make sure you do have the p5-io-socket-ssl
port installed first.  You might try it with debug:

$ /opt/local/bin/perl5.8 ssl_server.pl DEBUG

Maybe that'll help...

Bryan


> 
> -- 
> Scott * If you contact me off list replace talklists@ with scott@ *
>