Postfix + TLS
Buongiorno,
ho un dubbio: ho installato postfix con il supporto tls, i client
sono tutti Outlook 2003, nei log vedo :
Feb 22 10:31:58 localhost postfix/smtpd[12876]: starting TLS engine
Feb 22 10:31:58 localhost postfix/smtpd[12876]: setting up TLS connection
from unknown[xxx.xxx.xxx.xxx]
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:before/accept
initialization
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:error in SSLv2/v3
read client hello A
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:error in SSLv3
read client hello B
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:error in SSLv3
read client hello B
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:SSLv3 read client
hello B
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:SSLv3 write
server hello A
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:SSLv3 write
certificate A
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:SSLv3 write
server done A
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:SSLv3 flush data
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:error in SSLv3
read client certificate A
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:error in SSLv3
read client certificate A
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:SSLv3 read client
key exchange A
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:error in SSLv3
read certificate verify A
Feb 22 10:31:58 localhost last message repeated 3 times
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:SSLv3 read
finished A
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:SSLv3 write
change cipher spec A
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:SSLv3 write
finished A
Feb 22 10:31:58 localhost postfix/smtpd[12876]: SSL_accept:SSLv3 flush data
Feb 22 10:31:58 localhost postfix/smtpd[12876]: TLS connection established
from unknown[xxx.xxx.xxx.xxx]: TLSv1 with cipher RC4-MD5 (128/128 bits)
Feb 22 10:31:58 localhost postfix/smtpd[12876]: connect from
unknown[xxx.xxx.xxx.xxx]
Il traffico mi sembra criptato, ho provato sniffarlo con ethereal e di fatti
non vedo nulla in chiaro, però la cosa strana e che i pacchetti me li vede
come semplici tcp (Protocol TCP) a differenza di cyrus + tls che invece me
li vede come TLS
Che ne pensate ?
Grazie
Alessandro
Reply to: