[Reportbug-maint] Bug#854876: reportbug: SMTP and STARTTLS: SSLV3_ALERT_HANDSHAKE_FAILURE

Scott Leggett scott at sl.id.au
Sat Feb 11 13:17:45 UTC 2017

Package: reportbug
Version: 7.1.4
Severity: important

Dear Maintainer,

Reportbug fails to talk to my smarthost in order to send mail with the
error message:

  SMTP send failure: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert
  handshake failure (_ssl.c:720).

Apparently reportbug doesn't support TLS configured with reasonable
ciphers. Relevant postfix config snippet:

  smtpd_tls_security_level = may
  # use server cipher ordering
  tls_preempt_cipherlist = yes
  # TLS only, no SSL
  smtpd_tls_protocols = !SSLv2, !SSLv3
  smtpd_tls_ciphers = high
  tls_high_cipherlist = HIGH:!aNULL:@STRENGTH


-- Package-specific info:
** Environment settings:
DEBEMAIL="scott at sl.id.au"
DEBFULLNAME="Scott Leggett"

** /home/scott/.reportbugrc:
reportbug_version "6.5.1"
mode standard
ui text
smtphost "mail.sl.id.au:587"
smtpuser "scott at sl.id.au"

-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing'), (50, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages reportbug depends on:
ii  apt                1.4~beta4
ii  python3-reportbug  7.1.4
pn  python3:any        <none>

reportbug recommends no packages.

Versions of packages reportbug suggests:
pn  claws-mail                                 <none>
pn  debconf-utils                              <none>
pn  debsums                                    <none>
pn  dlocate                                    <none>
pn  emacs23-bin-common | emacs24-bin-common    <none>
ii  exim4-daemon-light [mail-transport-agent]  4.88-5
ii  file                                       1:5.29-3
ii  gir1.2-gtk-3.0                             3.22.7-2
ii  gir1.2-vte-2.91                            0.46.1-1
ii  gnupg                                      2.1.18-3
ii  python3-gi                                 3.22.0-2
ii  python3-gi-cairo                           3.22.0-2
pn  python3-gtkspellcheck                      <none>
pn  python3-urwid                              <none>
ii  xdg-utils                                  1.1.1-1

Versions of packages python3-reportbug depends on:
ii  apt                1.4~beta4
ii  file               1:5.29-3
ii  python3-debian     0.1.30
ii  python3-debianbts  2.6.1
ii  python3-requests   2.12.4-1
pn  python3:any        <none>

python3-reportbug suggests no packages.

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/reportbug-maint/attachments/20170212/6446ff7a/attachment.sig>

More information about the Reportbug-maint mailing list