Loading ...
Sorry, an error occurred while loading the content.

Re: occasional TLS error 21415

Expand Messages
  • Victor Duchovni
    ... Multiple hosts at NYU are running a TLS implementation from another planet, don t worry about it... -- Viktor. Disclaimer: off-list followups get on-list
    Message 1 of 2 , Dec 31, 2006
    • 0 Attachment
      On Sun, Dec 31, 2006 at 03:47:46PM -0500, Mark Edwards wrote:

      > I'm seeing this kind of error once every few days on my Postfix 2.3.3
      > installation:
      >
      > Dec 25 10:59:51 mini postfix/smtpd[21415]: connect from
      > volunteer.med.nyu.edu[216.165.126.143]
      > Dec 25 10:59:52 mini postfix/smtpd[21415]: SSL_accept error from
      > volunteer.med.nyu.edu[216.165.126.143]: -1
      > Dec 25 10:59:52 mini postfix/smtpd[21415]: warning: TLS library
      > problem: 21415:error:05066066:Diffie-Hellman
      > routines:COMPUTE_KEY:invalid public key:dh_key.c:214:
      > Dec 25 10:59:52 mini postfix/smtpd[21415]: warning: TLS library
      > problem: 21415:error:1408B005:SSL
      > routines:SSL3_GET_CLIENT_KEY_EXCHANGE:DH lib:s3_srvr.c:1833:
      > Dec 25 10:59:52 mini postfix/smtpd[21415]: lost connection after
      > STARTTLS from volunteer.med.nyu.edu[216.165.126.143]
      > Dec 25 10:59:52 mini postfix/smtpd[21415]: disconnect from
      > volunteer.med.nyu.edu[216.165.126.143]
      >
      >
      > All of the times I have checked this out, the client immediately then
      > connects successfully without TLS. I did some googling to try and
      > find out what this error indicates exactly, but I haven't turned up
      > much.

      Multiple hosts at NYU are running a TLS implementation from another
      planet, don't worry about it...

      --
      Viktor.

      Disclaimer: off-list followups get on-list replies or get ignored.
      Please do not ignore the "Reply-To" header.

      To unsubscribe from the postfix-users list, visit
      http://www.postfix.org/lists.html or click the link below:
      <mailto:majordomo@...?body=unsubscribe%20postfix-users>

      If my response solves your problem, the best way to thank me is to not
      send an "it worked, thanks" follow-up. If you must respond, please put
      "It worked, thanks" in the "Subject" so I can delete these quickly.
    Your message has been successfully submitted and would be delivered to recipients shortly.