openssl & gmail problem

Brian Candler B.Candler at
Wed Nov 2 04:35:37 PST 2005

On Wed, Nov 02, 2005 at 09:35:04AM +0100, Meka[ni] wrote:
> 	Why doesn't this work:
> openssl s_client -starttls smtp -connect
> I've tried adding -CApath /usr/local/share/ssl/certs (that's where I keep certs), but nothing changed. This is the error I get:
> CONNECTED(000000003)
> 17478:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:567:
> openssl version
> 0.9.7e
> /usr/local/bin/openssl version
> 0.9.8a
> None of this works. Any ideas?

Run tcpdump and/or ktrace to see what's happening.

# tcpdump -i nv0 -n -s1500 -X tcp port 25

When I do this, I see:

< 220 ESMTP g1sm241248nfe
< 503 5.5.1 EHLO/HELO first g1sm241248nfe

I think that should be clear enough. Please feel free to submit a patch to
the openssl project, so that it sends EHLO first. Remind them that you
shouldn't try to use an ESMTP extension until you've first had it announced
to you that the extension is available.

(RFC 2821 section
"In any event, a
 client MUST issue HELO or EHLO before starting a mail transaction."



More information about the freebsd-net mailing list