Re: TLS apparently does not work

[listman@cpr.spb.ru (Alexey Lobanov)]

Hi.

> Date sent:      Fri, 3 Sep 1999 11:51:52 +0300
> From:           Matti Aarnio <mea@nic.funet.fi>
> To:             Eugene Crosser <crosser@online.ru>
> Subject:        Re: TLS apparently does not work

> > 2.99.51-patch1 that I have running in production *does* work, so this
> > is not a Netscape glitch.
> 
>     I am not so sure..  My own netscape does only 40-bit ciphers,
>     and that is what I have tested.

Just FYI. Our recent tests of 128-bit Netscape + Zmailer2.99.51 
+ OpenSSL 0.9.3 were succesful, as far as I understand the following 
log. My (test) server is self-sertified.
 
Subject:            TLS-test with Netscape Messenger

=========================
15132AMNB#  connection from james.encomix.es ipcnt 1 childs 2 
ident: IDENT-NOT-QUERIED
15132AMNBw  220-atrium.cor.neva.ru ZMailer ESMTP-server running 
at St.Petersburg Cardiology Institute
15132AMNBw  220 atrium.cor.neva.ru (NO UCE)(NO UBE) our local 
time is now Fri, 3 Sep 1999 13:51:16 +0400
15132AMNB#  remote from [194.143.192.49]:59915
15132AMNBr  EHLO james.encomix.es
15132AMNBw  250-atrium.cor.neva.ru Hello james.encomix.es
15132AMNBw  250-SIZE 2000000
15132AMNBw  250-8BITMIME
15132AMNBw  250-PIPELINING
15132AMNBw  250-CHUNKING
15132AMNBw  250-ENHANCEDSTATUSCODES
15132AMNBw  250-DSN
15132AMNBw  250-X-RCPTLIMIT 10000
15132AMNBw  250-STARTTLS
15132AMNBw  250-ETRN
15132AMNBw  250 HELP
15132AMNBr  STARTTLS
15132AMNBw  220 Ready to start TLS
15132AMNB#  SSL_accept:before/accept initialization
15132AMNB#  SSL_accept:SSLv3 read client hello A
15132AMNB#  SSL_accept:SSLv3 write server hello A
15132AMNB#  SSL_accept:SSLv3 write certificate A
15132AMNB#  SSL_accept:SSLv3 write server done A
15132AMNB#  SSL_accept:SSLv3 flush data
15132AMNB#  SSL_accept:SSLv3 read client key exchange A
15132AMNB#  SSL_accept:SSLv3 read finished A
15132AMNB#  SSL_accept:SSLv3 write change cipher spec A
15132AMNB#  SSL_accept:SSLv3 write finished A
15132AMNB#  SSL_accept:SSLv3 flush data
15132AMNB#  TLS connection established
15132AMNB#  Cipher: RC4-MD5 keybits 128 version TLSv1/SSLv3
15132AMNBr  EHLO james.encomix.es
15132AMNBw  250-atrium.cor.neva.ru Hello james.encomix.es
15132AMNBw  250-SIZE 2000000
15132AMNBw  250-8BITMIME
15132AMNBw  250-PIPELINING
15132AMNBw  250-CHUNKING
15132AMNBw  250-ENHANCEDSTATUSCODES
15132AMNBw  250-DSN
15132AMNBw  250-X-RCPTLIMIT 10000
15132AMNBw  250-ETRN
15132AMNBw  250 HELP
15132AMNBr  MAIL FROM:<kobalt@james.encomix.es>
15132AMNBw  250 2.1.0 Sender syntax Ok
15132AMNBr  RCPT TO:<testtls@atrium.cor.neva.ru>
15132AMNBw  250 2.1.5 Recipient address syntax Ok
15132AMNBr  DATA
15132AMNBw  354 Start mail input; end with <CRLF>.<CRLF>
15132AMNBw  250 2.6.0 S10165AbPICJvo message accepted
15132AMNB#  S10165AbPICJvo: 1653 bytes
15132AMNBr  QUIT
15132AMNBw  221 2.0.0 atrium.cor.neva.ru Out
15132AMNB#  TLS stopping; mode was: ON
======================

Alexey