OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: postfix 20050206 - tls problem

akpostfixnavopgd.pl
Date: Tue Feb 08 2005 - 08:23:51 CST


Wietse Venema:
> akpostfixnavopgd.pl:
> [ Charset ISO-8859-2 unsupported, converting... ]
> > Victor Duchovni:
> >
> > > openssl s_client -starttls smtp -connect 127.0.0.1:25
> > >
> > > This exists in openssl 0.9.7 (perhaps also 0.9.6) and does
> > > not send "EHLO/HELO" before "STARTTLS" (anyone care to file a
> > > bug report?).
> >
> > HELO/EHLO is not required before STARTTLS (see RFC 2487)
>
> Yes, well, HELO/EHLO isn't required for MAIL either (RFC
> 2821), but how would a client know that the server is
> STARTTLS enabled without sending EHLO first?

Openssl s_client doesn't care about server not supporting STARTTLS... It has
no other way of connecting, thus HELO/EHLO is meaningless.

Your question is obvious to me, I just think there's no need to file PR in
openssl.

Regards,
Andrzej Kukula