openssl & gmail problem
B.Candler at pobox.com
Wed Nov 2 04:35:37 PST 2005
On Wed, Nov 02, 2005 at 09:35:04AM +0100, Meka[ni] wrote:
> Why doesn't this work:
> openssl s_client -starttls smtp -connect smtp.gmail.com:25
> I've tried adding -CApath /usr/local/share/ssl/certs (that's where I keep certs), but nothing changed. This is the error I get:
> 17478:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:567:
> openssl version
> /usr/local/bin/openssl version
> None of this works. Any ideas?
Run tcpdump and/or ktrace to see what's happening.
# tcpdump -i nv0 -n -s1500 -X tcp port 25
When I do this, I see:
< 220 mx.gmail.com ESMTP g1sm241248nfe
< 503 5.5.1 EHLO/HELO first g1sm241248nfe
I think that should be clear enough. Please feel free to submit a patch to
the openssl project, so that it sends EHLO first. Remind them that you
shouldn't try to use an ESMTP extension until you've first had it announced
to you that the extension is available.
(RFC 2821 section 220.127.116.11)
"In any event, a
client MUST issue HELO or EHLO before starting a mail transaction."
More information about the freebsd-net