Re: SMTP over SSL

[Jarmo Hurri]

Adam> $ openssl s_client -starttls smtp -connect smtp.welho.com:465

>> CONNECTED(00000003)

>> Is this good or bad?

Adam> If it stops there, then it's bad.

Yep, it stops there. But this works:

--------------------------------------------------------------------------
[jarmo@localhost ~]$ gnutls-cli --port 465 smtp.welho.com

...

- Version: TLS1.0
- Key Exchange: DHE-RSA
- Cipher: AES-128-CBC
- MAC: SHA1
- Compression: NULL
- Handshake was completed

- Simple Client Mode:

220 smtp6.welho.com ESMTP Postfix
--------------------------------------------------------------------------

Adam> Port 25 _with starttls_ is not insecure.

>> I know, but starttls does not work in port 25.

Adam> So "openssl s_client -starttls smtp -connect smtp.welho.com:25"
Adam> doesn't work?

Nope, as demonstrated by the following:

--------------------------------------------------------------------------
[jarmo@localhost ~]$ openssl s_client -starttls smtp -connect smtp.welho.com:25

...

---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 189 bytes and written 148 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
---
--------------------------------------------------------------------------

-- 
Jarmo Hurri

Remove all garbage from header email address when replying, or just
use firstname.lastname@syk.fi .