• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

sslv3_alert_handshake_failure error

U

UnityWeb

Guest
Hi,

After upgrading openssl to latest 0.9.8e, i'm getting this qmail error :

delivery 11: deferral: TLS_connect_failed:_error:14077410:SSL_routines:SSL23_GET_SERVER_HELLO:sslv3_alert_handshake_failure;_connected_to_1.2.3.4

It seems that the new version of openssl breaks something, crawling around i've found
this thread : http://www.thegillis.net/index.php?option=com_content&task=view&id=41&Itemid=31

which suggest putting a 'control/tlsserverciphers' in qmail, with a single word "DEFAULT" in it.

After restarting qmail, still the same error.

Any clues ?

Thanks
 
Old post I know... But in case anybody runs into this... Here is how you fix this error:

Run the following commands as root:

Code:
openssl ciphers > /var/qmail/control/tlsserverciphers
openssl ciphers > /var/qmail/control/tlsclientciphers

This corrected the problem for me on a CentOS 5.3 machine that was displaying this error.

You can verify that you have a working TLS installation by running the following command:

Code:
openssl s_client -starttls smtp -crlf -connect mail.example.com:25

where mail.example.com is your mail server you want to test.
 
Back
Top