Virtual Users And Domains With Postfix, Courier And MySQL - TLS not working

[c4rdinal]

# tail -f /var/log/mail.log
Apr 18 00:26:02 mail postfix/smtpd[5615]: disconnect from localhost[127.0.0. 1]
Apr 18 00:29:46 mail postfix/smtpd[5618]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Apr 18 00:29:46 mail postfix/smtpd[5618]: connect from localhost[127.0.0.1]
Apr 18 00:30:04 mail postfix/smtpd[5618]: disconnect from localhost[127.0.0. 1]
Apr 18 15:09:26 mail authdaemond: modules="authmysql", daemons=5
Apr 18 15:09:27 mail authdaemond: Installing libauthmysql
Apr 18 15:09:27 mail authdaemond: Installation complete: authmysql
Apr 18 15:09:33 hercules postfix/master[2248]: daemon started -- version 2.3.8, configuration /etc/postfix
Apr 18 15:15:43 mail postfix/master[2248]: terminating on signal 15
Apr 18 15:15:43 mail postfix/master[2487]: daemon started -- version 2.3.8, configuration /etc/postfix
Apr 18 15:17:00 mail postfix/smtpd[2502]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Apr 18 15:17:00 mail postfix/smtpd[2502]: initializing the server-side TLS engine
Apr 18 15:17:00 mail postfix/smtpd[2502]: connect from localhost[127.0.0.1]
Apr 18 15:17:18 mail postfix/smtpd[2502]: disconnect from localhost[127.0.0.1]


# tail -f /var/log/syslog
Apr 18 15:09:35 mail /usr/sbin/cron[2339]: (CRON) INFO (Running @reboot jobs)
Apr 18 15:09:39 mail kernel: eth0: no IPv6 routers present
Apr 18 15:15:43 mail postfix/master[2248]: terminating on signal 15
Apr 18 15:15:43 mailpostfix/master[2487]: daemon started -- version 2.3.8, configuration /etc/postfix
Apr 18 15:17:00 mail postfix/smtpd[2502]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
Apr 18 15:17:00 mail postfix/smtpd[2502]: initializing the server-side TLS engine
Apr 18 15:17:00 mail postfix/smtpd[2502]: connect from localhost[127.0.0.1]

TIA

[falko]

Originally Posted by c4rdinal

Apr 18 00:29:46 mail postfix/smtpd[5618]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled

What's the output of

postconf -d | grep nis

?

[c4rdinal]

Originally Posted by falko

What's the output of

postconf -d | grep nis

?

Here's the result of the command:

#postconf -d | grep nis
alias_maps = hash:/etc/aliases, nis:mail.aliases
lmtp_sasl_mechanism_filter =
smtp_sasl_mechanism_filter =

[falko]

Run

postconf -e 'alias_maps = hash:/etc/aliases'
/etc/init.d/postfix restart

[c4rdinal]

Originally Posted by falko

Run

postconf -e 'alias_maps = hash:/etc/aliases'
/etc/init.d/postfix restart

Hi falko,

Here's the result after applying the above command.

# openssl s_client -connect mail.domain.com:25
CONNECTED(00000003)
5558:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown

#tail -f /var/log/mail.log

Apr 21 17:56:14 mail postfix/smtpd[5563]: connect from hercules.alsterph.com[192.168.1.221]
Apr 21 17:56:14 mail postfix/smtpd[5563]: lost connection after UNKNOWN from mail.domain.com[192.168.1.221]
Apr 21 17:56:14 mails postfix/smtpd[5563]: disconnect from mail.domain.com[192.168.1.221]

#tail -f /var/log/syslog

Apr 21 17:57:21 mail postfix/anvil[5559]: statistics: max connection rate 2/60s for (125:192.168.1.221) at Apr 21 17:56:14
Apr 21 17:57:21 mail postfix/anvil[5559]: statistics: max connection count 1 for (125:192.168.1.221) at Apr 21 17:47:21
Apr 21 17:57:21 mail postfix/anvil[5559]: statistics: max cache size 1 at Apr 21 17:47:21
Apr 21 17:57:33 mail postfix/smtpd[5563]: connect from mail .domain.com[192.168.1.221]
Apr 21 17:57:33 mail postfix/smtpd[5563]: lost connection after UNKNOWN from mail.domain.com[192.168.1.221]
Apr 21 17:57:33 mail postfix/smtpd[5563]: disconnect from mail.domain.com[192.168.1.221]


# openssl s_client -connect localhost:25 -starttls smtp
CONNECTED(00000003)
5560:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

#tail -f /var/log/mail.log
Apr 21 18:00:01 mail postfix/smtpd[5571]: connect from localhost[127.0.0.1]
Apr 21 18:00:01 mail postfix/smtpd[5571]: setting up TLS connection from localhost[127.0.0.1]
Apr 21 18:00:01 mail postfix/smtpd[5571]: SSL_accept:before/accept initialization
Apr 21 18:00:01 mail postfix/smtpd[5571]: read from 08096F80 [080A1F68] (11 bytes => -1 (0xFFFFFFFF))
Apr 21 18:00:01 mail postfix/smtpd[5571]: SSL_accept:error in SSLv2/v3 read client hello A
Apr 21 18:00:01 mail postfix/smtpd[5571]: read from 08096F80 [080A1F68] (11 bytes => 11 (0xB))
Apr 21 18:00:01 mail postfix/smtpd[5571]: 0000 80 74 01 03 01 00 4b .t....K
Apr 21 18:00:01 mail postfix/smtpd[5571]: 0007 - <SPACES/NULLS>
Apr 21 18:00:01 mail postfix/smtpd[5571]: read from 08096F80 [080A1F73] (107 bytes => -1 (0xFFFFFFFF))
Apr 21 18:00:01 mail postfix/smtpd[5571]: SSL_accept:error in SSLv2/v3 read client hello B
Apr 21 18:00:01 mail postfix/smtpd[5571]: read from 08096F80 [080A1F73] (107 bytes => 18 (0x12))
Apr 21 18:00:01 hercules postfix/smtpd[5571]: 0000 00 00 39 00 00 38 00 00|35 00 00 16 00 00 13 00 ..9..8.. 5.......
Apr 21 18:00:01 hercules postfix/smtpd[5571]: 0010 00 0a ..
Apr 21 18:00:01 hercules postfix/smtpd[5571]: read from 08096F80 [080A1F85] (89 bytes => -1 (0xFFFFFFFF))
Apr 21 18:00:01 mail postfix/smtpd[5571]: SSL_accept:error in SSLv2/v3 read client hello B


#tail -f /var/log/syslog
Apr 21 18:02:16 mail postfix/smtpd[5571]: connect from localhost[127.0.0.1]
Apr 21 18:02:16 mail postfix/smtpd[5571]: setting up TLS connection from localhost[127.0.0.1]
Apr 21 18:02:16 mail postfix/smtpd[5571]: SSL_accept:before/accept initialization
Apr 21 18:02:16 mail postfix/smtpd[5571]: read from 0808F9F8 [080A0F58] (11 bytes => -1 (0xFFFFFFFF))
Apr 21 18:02:16 mail postfix/smtpd[5571]: SSL_accept:error in SSLv2/v3 read client hello A
Apr 21 18:02:16 mail postfix/smtpd[5571]: read from 0808F9F8 [080A0F58] (11 bytes => 11 (0xB))
Apr 21 18:02:16 hercules postfix/smtpd[5571]: 0000 80 74 01 03 01 00 4b .t....K
Apr 21 18:02:16 mail postfix/smtpd[5571]: 0007 - <SPACES/NULLS>
Apr 21 18:02:16 mail postfix/smtpd[5571]: read from 0808F9F8 [080A0F63] (107 bytes => -1 (0xFFFFFFFF))
Apr 21 18:02:16 mail postfix/smtpd[5571]: SSL_accept:error in SSLv2/v3 read client hello B
Apr 21 18:02:16 mail postfix/smtpd[5571]: read from 0808F9F8 [080A0F63] (107 bytes => 18 (0x12))
Apr 21 18:02:16 mail postfix/smtpd[5571]: 0000 00 00 39 00 00 38 00 00|35 00 00 16 00 00 13 00 ..9..8.. 5.......
Apr 21 18:02:16 mail postfix/smtpd[5571]: 0010 00 0a ..
Apr 21 18:02:16 mail postfix/smtpd[5571]: read from 0808F9F8 [080A0F75] (89 bytes => -1 (0xFFFFFFFF))
Apr 21 18:02:16 mail postfix/smtpd[5571]: SSL_accept:error in SSLv2/v3 read client hello B


Any suggestions?

[falko]

What's the output of

ls -la /etc/postfix

?

[c4rdinal]

Originally Posted by falko

What's the output of

ls -la /etc/postfix

?

Hi falko,

Thank you for your reply. Actually, I'm still stuck with this problem and Googling for almost a week now.

Here's the result of command.

# ls -la /etc/postfix/
total 188
drwxr-xr-x 6 root root 4096 2008-04-14 15:05 .
drwxr-xr-x 68 root root 4096 2008-04-23 08:05 ..
-rw-r--r-- 1 root root 373 2002-04-25 16:13 dynamicmaps.cf
-rw-r--r-- 1 root root 24 2002-05-05 16:01 header_checks
-rw-r--r-- 1 root root 12288 2002-05-05 16:01 header_checks.db
-rw-r--r-- 1 root root 5852 2002-05-05 19:16 main.cf
-rw-r--r-- 1 root root 1830 2002-04-25 17:57 main.cf_orig
-rw-r--r-- 1 root root 5939 2008-04-14 15:05 master.cf
-rw-r--r-- 1 root root 6079 2008-04-14 15:05 master.cf-old.20080414
-rw-r--r-- 1 root root 596 2002-05-05 16:02 mime_checks
-rw-r--r-- 1 root root 12288 2002-05-05 16:02 mime_checks.db
-rw-r--r-- 1 root root 249 2002-04-25 17:39 mysql_virtual_alias_maps.cf
-rw-r--r-- 1 root root 567 2002-04-25 17:50 mysql_virtual_domains_maps.cf
-rw------- 1 root root 43 2002-04-26 00:31 mysql_virtual_domains_maps.cf.sav e
-rw-r--r-- 1 root root 274 2002-04-25 17:51 mysql_virtual_mailbox_limit_maps. cf
-rw-r--r-- 1 root root 307 2002-04-25 17:52 mysql_virtual_mailbox_maps.cf
-rw-r--r-- 1 root root 272 2002-04-25 17:53 mysql_virtual_transports.cf
-rwxr-xr-x 1 root root 10312 2008-04-14 15:04 postfix-chroot.sh
-rw-r--r-- 1 root root 17975 2007-03-21 19:17 postfix-files
-rwxr-xr-x 1 root root 6840 2007-03-21 19:17 postfix-script
-rwxr-xr-x 1 root root 22239 2007-03-21 19:17 post-install
drwxr-xr-x 2 root root 4096 2002-05-05 16:31 procmail
drwxr-xr-x 2 root root 4096 2002-05-05 16:53 sasl
drwxr-xr-x 2 root root 4096 2008-04-14 15:20 signature
-rw-r--r-- 1 root root 140 2002-05-05 16:03 transport
-rw-r--r-- 1 root root 12288 2002-05-05 16:03 transport.db
drwxr-xr-x 2 root root 4096 2002-05-05 18:59 vmailsql

Any suggestions?

TIA

[falko]

You're using

smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.cert
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem

in your main.cf, but /etc/postfix/ssl doesn't exist...

[c4rdinal]

Originally Posted by falko

You're using

smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.cert
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem

in your main.cf, but /etc/postfix/ssl doesn't exist...

Hi falco,

I corrected the directory location as indicated. But the same error exists.

TIA

[falko]

Did you also create the SSL certs?