OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: 454 TLS not available due to temporary reason

From: Wietse Venema (wietseporcupine.org)
Date: Fri Jan 12 2007 - 16:40:14 CST


Andy Dills:
> On Fri, 12 Jan 2007, Wietse Venema wrote:
>
> > Andy Dills:
> > >
> > > Does anybody know what possible things can generate this error message,
> > > "454 TLS not available due to temporary reason"?
> > >
> > > I'm not finding anything helpful in my logs, this affects multiple users,
> > > and not consistently.
> > >
> > > Is this a reverse DNS lookup timeout, or something along those lines?
> >
> > OpenSSL initialization error. Look for warnings in the maillog file.
>
> Sorry to be dense, but I'm having a heck of a time finding warnings
> corresponding to this event. This error was provided by the customer.
>
> Compounding the issue is we have a cluster of several mail servers to
> check, with each logfile growing to be >500mb by the end of the day.
>
> I've tried grepping for TLS and SSL, but I'm not finding errors occuring
> with the frequency the customers are reporting it.
>
> Can you maybe suggest some key words to grep for?

You mean,

    $ strings /usr/lib/libssl.so
    $ strings /usr/lib/libcrypto.so

I suppose you know WHO the client is.

First grep for the client, then grep for the smtpd process ID.

        Wietse