Topic: SSL mail random fail-fatal: ssl decode error: illegal param~

[scorched]

Greetings All,

I have recently set up a SME 7.1 server providing web and mail services in server/gateway mode. I have noticed an interesting problem that I have not been able to find any information, I was hoping some experienced people here may have some idea's regarding.

When sending mail from client to the SME server is sometimes times out as though the server is not listening or refusing connections. This only happens a small % of the time, for external and internal users alike. I get this problem on thunderbird client and users who have also told me about the problem also use thunderbird. I'm not sure if its mail client specific. The previous SME 6.x server which this 7.1 took over from did not get the same problems.

Any experience would be greatly appreciated, thank you.

Regards,
Scorched

[scorched]

Thanks to those who have taken the time to read my post.

I have some more information in regard to this issue that may help track down the cause.

Although not as noticeable this problem is also effecting pop3s and imaps, when retrieving mail thunderbird sometimes gives "connecting to server....." and just waits, if you hit "get mail" again then it will retrieve correctly.

It seems to be related to SSL, and only present when using the thunderbird client.
From sqpsmtp current log:
@400000004666103721f853c4 sslio[16082]: fatal: ssl decode error: illegal parameter
@400000004666103721f951ac sslio[16082]: info: bytes in: 181
@400000004666103721f9885c sslio[16082]: info: bytes ou: 0
The same error is present in both pop3s and imaps current logs also.
This is directly related to the problem.

Regards,
Scorched

[mmccarn]

Here's a bug post about this: http://bugs.contribs.org/show_bug.cgi?id=2697

There is apparently a work-around posted on the wiki, but the wiki is down right now: http://wiki.contribs.org/Email#.22concurrency_limit_reached.22_when_using_IMAP

Here's another bug that talks briefly about Thunderbird ssl / tls issues: https://bugzilla.mozilla.org/show_bug.cgi?id=374058

(I found these by searching bugzilla for 'sslio'.  If they don't apply please forgive me...)

[scorched]

Mmccarn,

Thanks for the reply
 
The current SME7.1 server took over from a SME6 server which didnt get the same error's so I was looking in the wrong place. I thought that the problem was on my server so I dismissed these TB bugs previously thinking that they were not related.
Making this change on the thunderbird client's fixes the problem, though if anyone knows what I would have to do to the server to avoid getting every thunderbird user to make this change it would be greatly appreciated.

Regards,
Scorched