Re: [0T] sendmail relay to gmail smtp server

[Ashish SHUKLA]

Harry Putnam writes:
> NOTE:  This is a copy of a post made on the ding group but I didn't
> think to cross post it here so please pardon me not using the normal
> cross post procedure.  The ding group seems to be dead for the moment
> and the query is relevant here as well I hope.


[...]


> I think these are the sendmail logs that contain the relevant error:

> (I'm not sure if the `verify=FAIL' means what it suggests)

> ,----
> | Dec 26 21:41:38 reader sm-mta[24243]: STARTTLS=client,
> | relay=smtp.gmail.com, version=TLSv1/SSLv3, verify=FAIL,
> | cipher=RC4-SHA, bits=128/12
> | 
> | Dec 26 21:41:38 reader sm-mta[24243]: pBR2fbLX024243:
> |   to=<reader@newsguy.com>, ctladdr=<reader@reader.local.lan>
> |   (1000/1000), delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=30563,
> |   relay=smtp.gmail.com [209.85.225.109], dsn=5.0.0, 
> |   stat=Service unavailable
> | 
> | Dec 26 21:41:38 reader sm-mta[24243]: pBR2fbLX024243: pBR2fbLY024243: DSN: 
> Service unavailable
> `----

Could you please make sure your certificates/CA are properly setup in
sendmail?  Looks like sendmail is having issues verifying gmail's TLS
certificate after STARTTLS, and therefore it's not continuing with STARTTLS,
and because gmail doesn't accept email over non-TLS transport it fails.

HTH
-- 
Ashish SHUKLA

“Freedom is the freedom to say that two plus two make four. If that is
granted, all else follows.” (George Orwell, "Nineteen Eighty-Four",
1949)

pgpAgwBnm_1cz.pgp
Description: PGP signature