MRatWork Forum by Mustafa Ramadhan

Sawo Project - Kloxo-MR Discussions => Kloxo-MR Bugs and Requests => Topic started by: KloxoLittleFish on 2014-02-28, 17:18:15

Title: [Mail Error] sslv3 alert bad certificate and more
Post by: KloxoLittleFish on 2014-02-28, 17:18:15
Hello ... I updated kloxomr. Then the email doesnt work ...

Code: [Select]
couriertls: accept: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate
Enable Spamdyke ...

Code: [Select]
ERROR(process_config_file()@configuration.c:4370): Unknown configuration file option in file /etc/spamdyke.conf on line 360: local-domains-file

Enable Virus Scan

Code: [Select]
simscan_is_not_installed_for_virus_scan

Quote
A. Kloxo-MR: 6.5.0.f-2014020301

B. OS: CentOS release 6.5 (Final) x86_64

C. Apps:
   1. MySQL: mysql-5.5.34-1.el6.x86_64
   2. PHP: php54-5.4.25-1.ius.el6.x86_64
   3. Httpd: httpd-2.2.26-2.el6.x86_64
   4. Lighttpd: --uninstalled--
   5. Nginx: --uninstalled--
   6. Qmail: qmail-toaster-1.03-1.3.35.mr.el6.x86_64
      - with: courier-imap-toaster-4.1.2-1.3.14.mr.el6.x86_64
   7. Dns: bind-9.9.5-1.el6.x86_64

D. Php-type (for Httpd/proxy): php-fpm_event

E. Memory:
                total       used       free     shared    buffers     cached
   Mem:         32143       5374      26769          0        242       1515
   -/+ buffers/cache:       3616      28526
   Swap:        19997          0      19997
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: MRatWork on 2014-02-28, 17:21:46
Try 'yum install simscan-toaster; sh /script/fixmail-all; sh /script/restart-mail'.
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: KloxoLittleFish on 2014-02-28, 17:33:16
yum error
Code: [Select]
Transaction Check Error:
  el archivo /etc/clamd.conf de la instalaciĆ³n de clamav-toaster-0.98.1-1.4.7.mr.el6.x86_64 entra en conflicto con el archivo del paquete clamav-1:0.97.8-64.el6.x86_64

mail error persists ... SSL3_READ_BYTES and ERROR(process_config_file()@configuration.c:4370)

Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: MRatWork on 2014-02-28, 17:40:33
Your server already have clamav. It's will be conflict with clamav-toaster from qmail.

Remove clamav first and then install clamav-toaster and simscan-toaster.
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: KloxoLittleFish on 2014-02-28, 18:30:18
clamav reinstall ok ... but SSL3_READ_BYTES and ERROR(process_config_file()@configuration.c:4370) ?
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: MRatWork on 2014-02-28, 18:56:28
Try reinstall qmail-toaster with 'yum reinstall *-toaster' and then run fixmail-all and restart-mail.
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: KloxoLittleFish on 2014-02-28, 19:48:47
OMG ... now when i restart-mail some times ...

Code: [Select]
multilog: fatal: unable to lock directory /var/log/qmail/clamd: temporary failure
when i send or recive a email with STARTTLS or SSL/TLS ...

Code: [Select]
SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate
when i active Spamdyke ...

Code: [Select]
ERROR(process_config_file()@configuration.c:4370)
before I sent all ok ... not now ...

Code: [Select]
SPF check:          softfail
DomainKeys check:   pass
DKIM check:         pass
Sender-ID check:    softfail
SpamAssassin check: ham

...?

Edit: I can create email acounts and "use" email acounts without security ...
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: MRatWork on 2014-03-01, 03:58:54
Have you install clamav and spamdyke?.
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: KloxoLittleFish on 2014-03-01, 11:14:48
clamav conflict ...

Code: [Select]
clamav-0.98.1-1.el6.x86_64 ent                  ra en conflicto con el archivo del paquete clamav-toaster-0.98.1-1.4.7.mr.el6.x8                  6_64

spamdyke

Code: [Select]
Package spamdyke-5.0.0-1.mr.el6.x86_64 already installed and latest version
Nothing to do
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: MRatWork on 2014-03-01, 11:28:31
Look like you install another repo except from CentOS and mratwork. Inform here 'dir /etc/yum.repos.d/'.
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: KloxoLittleFish on 2014-03-01, 11:41:09
Quote
CentOS-Base.repo  CentOS-Debuginfo.repo  CentOS-Media.repo  CentOS-Vault.repo  mratwork.repo
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: MRatWork on 2014-03-01, 12:05:51
Epel repo (include in mratwork.repo) serve clamav.rpm. This package will be conflict for clamav-toaster (serve by mratwork.repo alone).

You must use clamav-toaster instead clamav.
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: KloxoLittleFish on 2014-03-01, 12:14:25
Code: [Select]
Package clamav-toaster-0.98.1-1.4.7.mr.el6.x86_64 already installed and latest version


sh /script/restart-mail
Code: [Select]
Stopping qmail-toaster: svscan qmail logging.
qmail-send: no process killed
Starting qmail-toaster: svscan.
# multilog: fatal: unable to lock directory /var/log/qmail/clamd: temporary failure


what about this?

when i send or recive a email with STARTTLS or SSL/TLS ...

Code: [Select]
SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate
when i active Spamdyke ...

Code: [Select]
ERROR(process_config_file()@configuration.c:4370)
before I sent all ok ... not now ...

Code: [Select]
SPF check:          softfail
DomainKeys check:   pass
DKIM check:         pass
Sender-ID check:    softfail
SpamAssassin check: ham

...?


 ::)
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: MRatWork on 2014-03-01, 12:59:48
Try remove clamav-toaster and simscan-toaster first. And then run 'sh /script/fixmail-all'.

To make sure, don't enable 'virus scan' in panel.
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: KloxoLittleFish on 2014-03-01, 15:22:58
I remove ... reinstall ... reboot ... restart ... remove ... ad infinitum ... and now clamav-toaster "seems fine" ...

When the mail is restarted clamav does not stop and displays the multilog-error ... it is ok ...


1 - When i activate spamdyke in maillog it display the error ...

Code: [Select]
Unknown configuration file option in file /etc/spamdyke.conf on line 360: local-domains-file
line error
Code: [Select]
local-domains-file=/var/qmail/control/rcpthosts
in file ...
Quote
namehost.domain.com
domain1.com
dimain2.com
etc.com

it is default configuration ... what is wrong?


2 - Other thing ... when i send emails ... SPF and Sender-ID fails ...

Quote
SPF check:          softfail
DomainKeys check:   pass
DKIM check:         pass
Sender-ID check:    softfail
SpamAssassin check: ham

Does it not work by default?

I don't want to be insistent. I can do it manually but then I would have to do it every time that update the mail server.
Sorry about my english :P
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: MRatWork on 2014-03-01, 15:51:47
Try 'yum reinstall *-toaster; yum install *-toaster spamdyke; sh /script/fixmail-all'. And then reboot.
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: KloxoLittleFish on 2014-03-01, 17:58:41
after reboot ... I need to make a cleanup to make it work ....

Code: [Select]
SPF check:          softfail
DomainKeys check:   pass
DKIM check:         pass
Sender-ID check:    softfail
SpamAssassin check: ham

Code: [Select]
454 TLS connection failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate (#4.3.0)?
Spamdyke I'll fix other day ...
Now ... I need to know if mrkloxo default signature SPF and Sender-ID.
Also if the mail allows TLS connections.

Yes or no?
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: MRatWork on 2014-03-01, 18:49:16
Search this forum about this issue, especially discussion from me, chrisf and Spacedust.
Title: Re: [Mail Error] sslv3 alert bad certificate and more
Post by: KloxoLittleFish on 2014-03-03, 13:43:59
SPF & Sender-ID

edit DNS Hostname:   __base__

Code: [Select]
v=spf1 a mx  ~allto
Code: [Select]
v=spf1 a mx a:mail.mydomain.com a:mydomain.com ip4:myipserver ip4:myipdns2 ~all

problem solved in /etc/spamdyke.conf ...

problem: local-domains-file=/var/qmail/control/rcpthosts

change to: qmail-rcpthosts-file=/var/qmail/control/rcpthosts