Koozali.org: home of the SME Server

Secure email protocols question

Offline ddougan

  • *
  • 155
  • +0/-0
    • http://www.DouganConsulting.com
Secure email protocols question
« on: May 02, 2005, 05:16:47 AM »
I have a 6.0 server with Damien Curtain's secure email contrib running successfully. Today, I installed the latest version of the SugarCRM package (3.0), which has the ability to email out to contacts. It has a setting for using SMTP authorization. I've tried to configure this, using port 465, and a valid id/password for authentication. In the /var/log/ssl-smtpfront-qmail/current file, I see the following error:

2005-05-01 19:50:33.017279500 2005.05.01 19:50:33 LOG5[29613:1024]: Using 'ssmtp' as tcpwrapper service name
2005-05-01 19:50:33.024899500 2005.05.01 19:50:33 LOG5[29613:1024]: stunnel 3.22 on i386-redhat-linux-gnu PTHREAD+LIBWRAP with OpenSSL 0.9.6b [engine] 9 Jul 2001
2005-05-01 19:50:33.025363500 2005.05.01 19:50:33 LOG5[29613:1024]: ssmtp connected from 64.180.108.157:50929
2005-05-01 19:50:42.989350500 2005.05.01 19:50:42 LOG3[29613:1024]: SSL_accept: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol

I'm assuming that this is because the SMTP authentication it's trying is not the same as that used by Damien's contrib.

Can someone clarify if this is the case, and what it might be using? I can then post an enhancement request for it to support Damien's method (SSMTP?).

Thanks,

Des
Des Dougan

Offline wjhobbs

  • *****
  • 171
  • +0/-0
    • http://www.chryxus.ca
Secure email protocols question
« Reply #1 on: May 05, 2005, 03:10:22 AM »
Des,

Sorry, I can't help with your question.

But your SugarCRM choice caught my attention. I was wondering why you chose Sugar rather than the vTiger fork of SugarCRM that seems to have a more GPL-friendly license.

John
...

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Secure email protocols question
« Reply #2 on: May 05, 2005, 04:52:25 AM »
Quote from: "ddougan"

It has a setting for using SMTP authorization. I've tried to configure this, using port 465, and a valid id/password for authentication. In the /var/log/ssl-smtpfront-qmail/current file, I see the following error:

2005-05-01 19:50:33.017279500 2005.05.01 19:50:33 LOG5[29613:1024]: Using 'ssmtp' as tcpwrapper service name
2005-05-01 19:50:33.024899500 2005.05.01 19:50:33 LOG5[29613:1024]: stunnel 3.22 on i386-redhat-linux-gnu PTHREAD+LIBWRAP with OpenSSL 0.9.6b [engine] 9 Jul 2001
2005-05-01 19:50:33.025363500 2005.05.01 19:50:33 LOG5[29613:1024]: ssmtp connected from 64.180.108.157:50929
2005-05-01 19:50:42.989350500 2005.05.01 19:50:42 LOG3[29613:1024]: SSL_accept: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol

I'm assuming that this is because the SMTP authentication it's trying is not the same as that used by Damien's contrib.


No, you're seeing an SSL handshake issue. That's before any SMTP authentication takes place.

There's no need to use SSL for a connection within the server itself, and there's not much point using authentication either.