<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi Timo,<br>
I've tried amavisd 2.8.2 rc1, and I've a problem with TLS. <br>
Here the relevant conf in amavisd.conf:<br>
$tls_security_level_in = 'encrypt'; # undef, 'may', 'encrypt', ...<br>
$tls_security_level_out = 'encrypt';<br>
$smtpd_tls_cert_file =
'/etc/amavisd/mailstorm3.spamguard.fr-cert.pem';<br>
$smtpd_tls_key_file =
'/etc/amavisd/mailstorm3.spamguard.fr-key.pem';<br>
<br>
And I've got these in mail.log:<br>
Oct 13 12:21:55 smtp01 amavis[15005]: (15005-01) (!!)Error on
socket: SSL connect attempt failed with unknown error
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
verify failed\n<br>
Oct 13 12:21:55 smtp01 amavis[15005]: (15005-01) mail_via_smtp:
session failed: Error upgrading socket to SSL: SSL connect attempt
failed with unknown error error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed at
/usr/sbin/amavisd line 7734.<br>
Oct 13 12:21:55 smtp01 amavis[15005]: (15005-01) (!)SEND from
<> -> <a class="moz-txt-link-rfc2396E" href="mailto:clean-quarantine@spamguard.fr"><clean-quarantine@spamguard.fr></a>, 451 4.5.0 From
MTA() during fwd-connect (Error upgrading socket to SSL: SSL connect
attempt failed with unknown error error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed at
/usr/sbin/amavisd line 7734.): id=15005-01<br>
Oct 13 12:21:55 smtp01 amavis[15005]: (15005-01) (!!)TROUBLE in
check_mail: quar+notif FAILED: temporarily unable to quarantine: 451
4.5.0 From MTA() during fwd-connect (Error upgrading socket to SSL:
SSL connect attempt failed with unknown error error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed at
/usr/sbin/amavisd line 7734.): id=15005-01 at /usr/sbin/amavisd line
15591.<br>
Oct 13 12:21:55 smtp01 amavis[15005]: (15005-01) (!)PRESERVING
EVIDENCE in /var/amavis/tmp/amavis-20131013T122154-15005-N4LueMVr<br>
Oct 13 12:21:55 smtp01 amavis[15005]: (15005-01) size: 14475, TIMING
[total 384 ms] - sql-prepare: 1.6 (0%)0, SMTP greeting: 0.<br>
<br>
It seems happening since the perl module <b>IO::Socket::SSL </b>upgrade
from 1.76 to 1.95<br>
<u>I've tried to downgrade amavisd to 2.8.1 and it's still the same.</u><br>
<br>
some version information:<br>
Debian testing<br>
amavisd-new-2.8.2-rc1 (20130904)<br>
OpenSSL 1.0.1e 11 Feb 2013<br>
<br>
Oct 13 12:21:16 smtp01 amavis[14988]: starting. /usr/sbin/amavisd at
mailstorm3.spamguard.fr amavisd-new-2.8.2-rc1 (20130904), Unicode
aware, LANG="en_GB"<br>
Oct 13 12:21:16 smtp01 amavis[14988]: perl=5.018001, user=, EUID:
1002 (1002); group=, EGID: 1002 1002 (1002 1002)<br>
Oct 13 12:21:16 smtp01 amavis[14988]: INFO: no optional modules:
unicore::lib::Nt::De.pl Unix::Getrusage
/etc/mail/spamassassin/crm114.pm auto/POSIX/SigAction/new.al
unicore/lib/Nt/De.pl<br>
Oct 13 12:21:16 smtp01 amavis[14988]: SpamControl: scanner
SpamAssassin, module Amavis::SpamControl::SpamAssassin<br>
Oct 13 12:21:16 smtp01 amavis[14988]: SpamControl: scanner DSPAM,
module Amavis::SpamControl::ExtProg<br>
Oct 13 12:21:16 smtp01 amavis[14988]: SpamControl: init_pre_chroot
on SpamAssassin done<br>
Oct 13 12:21:16 smtp01 amavis[14988]: socket module
IO::Socket::INET6, protocol families available: INET, INET6<br>
Oct 13 12:21:16 smtp01 amavis[14988]: bind to
/var/amavis/amavisd.sock|unix, 87.98.168.176:10024/tcp,
87.98.168.176:10026/tcp, 87.98.168.176:9998/tcp,
87.98.168.176:10028/tcp, 87.98.168.176:10023/tcp,
87.98.168.176:10022/tcp, 87.98.168.176:10021/tcp,
87.98.168.176:10020/tcp, 87.98.168.176:10019/tcp,
87.98.168.176:10018/tcp, 87.98.168.176:10017/tcp,
87.98.168.176:10016/tcp, 87.98.168.176:10015/tcp<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Process
Backgrounded<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server:
2013/10/13-12:21:16 Amavis (type Net::Server::PreForkSimple)
starting! pid(14995)<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Binding to UNIX
socket file "/var/amavis/amavisd.sock"<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Binding to TCP
port 10024 on host 87.98.168.176 with IPv4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Binding to TCP
port 10026 on host 87.98.168.176 with IPv4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Binding to TCP
port 9998 on host 87.98.168.176 with IPv4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Binding to TCP
port 10028 on host 87.98.168.176 with IPv4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Binding to TCP
port 10023 on host 87.98.168.176 with IPv4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Binding to TCP
port 10022 on host 87.98.168.176 with IPv4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Binding to TCP
port 10021 on host 87.98.168.176 with IPv4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Binding to TCP
port 10020 on host 87.98.168.176 with IPv4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Binding to TCP
port 10019 on host 87.98.168.176 with IPv4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Binding to TCP
port 10018 on host 87.98.168.176 with IPv4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Binding to TCP
port 10017 on host 87.98.168.176 with IPv4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Binding to TCP
port 10016 on host 87.98.168.176 with IPv4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Binding to TCP
port 10015 on host 87.98.168.176 with IPv4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: Group Not
Defined. Defaulting to EGID '1002 1002'<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Net::Server: User Not
Defined. Defaulting to EUID '1002'<br>
Oct 13 12:21:16 smtp01 amavis[14995]: config files read:
/etc/amavisd.conf<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Amavis::Conf
2.319<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Archive::Zip
1.30<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module BerkeleyDB
0.53<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Compress::Raw::Zlib
2.062<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Compress::Zlib
2.062<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Crypt::OpenSSL::RSA
0.28<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module DBD::mysql
4.024<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module DBI
1.628<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module DB_File
1.827<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Digest::MD5
2.52<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Digest::SHA
5.85<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Encode
2.49<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module File::Temp
0.2302<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module IO::Socket::INET6
2.69<br>
Oct 13 12:21:16 smtp01 amavis[14995]:<b> Module IO::Socket::SSL
1.954</b><br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module MIME::Entity
5.503<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module MIME::Parser
5.503<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module MIME::Tools
5.503<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Mail::DKIM::Signer 0.4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Mail::DKIM::Verifier
0.4<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Mail::Header
2.12<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Mail::Internet
2.12<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Mail::SPF
v2.009<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Mail::SpamAssassin
3.004000<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Net::DNS
0.72<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Net::SSLeay
1.55<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Net::Server
2.007<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module NetAddr::IP
4.071<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Razor2::Client::Version
2.84<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Scalar::Util
1.27<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Socket
2.011<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Socket6
0.23<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Time::HiRes
1.9726<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module URI
1.60<br>
Oct 13 12:21:16 smtp01 amavis[14995]: Module Unix::Syslog 1.1<br>
<br>
<br>
<br>
Thank for your help !<br>
Best regards,<br>
Tonio<br>
</body>
</html>