Phil Anderson wrote:
Nathan Lee Reynolds (yibble) wrote:
On Mon, 2004-12-20 at 15:08 +1100, Phil Anderson wrote:
Is anyone else having problems sending mail with squirrelmail? This is
the only remaining problem I have before I'm switching my server to
enforcing mode. The attachment problem was fixed in the latest policy
update.
Same problem here, I have yet to find time to investigate :D
I think this is a TLS problem - not a squirrelmail problem - take a
look at the following. I think sendmail needs access the random
number generator? Or am I off track?
sendmail[4239]: iBJBWAxA004239: Authentication-Warning:
xxxx.pza.net.au: apache set sender to xxxx@xxxxxxxxxx using -f
sendmail[4239]: iBJBWAxA004239: from=xxxx@xxxxxxxxxx, size=1042,
class=0, nrcpts=1, msgid=<32@xxxxxxxxxxxxxx>, relay=apache@localhost
sendmail[4239]: iBJBWAxA004239: STARTTLS=client, error: connect
failed=-1, SSL_error=1, timedout=0, errno=0
sendmail[4239]: STARTTLS=client: 4239:error:24064064:random number
generator:SSLEAY_RAND_BYTES:PRNG not seeded:md_rand.c:503:You need to
read the OpenSSL FAQ, http://www.openssl.org/support/faq.html
sendmail[4239]: STARTTLS=client: 4239:error:05067003:Diffie-Hellman
routines:DH_generate_key:BN lib:dh_key.c:153:
sendmail[4239]: STARTTLS=client: 4239:error:14098005:SSL
routines:SSL3_SEND_CLIENT_KEY_EXCHANGE:DH lib:s3_clnt.c:1655:
sendmail[4239]: ruleset=tls_server, arg1=SOFTWARE, relay=[127.0.0.1],
reject=403 4.7.0 TLS handshake.
sendmail[4239]: iBJBWAxA004239: to=xxxx@xxxx, ctladdr=xxxx@xxxxxxxxxx
(48/48), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=31042,
relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: 403 4.7.0 TLS
handshake.
sendmail[4240]: STARTTLS=server, error: accept failed=0, SSL_error=5,
timedout=0, errno=0
sendmail[4240]: iBJBWAHc004240: localhost.localdomain [127.0.0.1] did
not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
kernel: audit(1103515248.224:0): avc: denied {
read } for pid=12496 exe=/usr/sbin/sendmail.sendmail name=urandom
dev=tmpfs ino=870 scontext=user_u:system_r:system_mail_t
tcontext=system_u:object_r:urandom_device_t tclass=chr_file
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
http://www.redhat.com/mailman/listinfo/fedora-selinux-list
Adding rule to policy.
