Hi,
> Can you reproduce this with gnutls-cli?
> (gnutls-cli --starttls-proto=smtp host.name.example.com)
I can reproduce it with gnutls client tool:
gnutls-cli --starttls --port=587 <shost>
Processed 174 CA certificate(s).
Resolving '<shost>'...
Connecting to '<sip>:587'...
- Simple Client Mode:
220 <shost> ESMTP Exim 4.87 Tue, 25 Oct 2016 19:52:51 +0200
EHLO <chost>
250-<shost> Hello <chost> [<cip>]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-STARTTLS
250-PRDR
250 HELP
STARTTLS
220 TLS go ahead
*** Starting TLS handshake
*** Fatal error: An unexpected TLS handshake packet was received.
*** Handshake has failed
> Might this be similar to 835342, caused by old packages or locally
> installed libraries?
> ldd /usr/sbin/exim4
ldd /usr/sbin/exim4
linux-vdso.so.1 (0x00007ffd97961000)
libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2
(0x00007f1406894000)
libnsl.so.1 => /lib/x86_64-linux-gnu/libnsl.so.1 (0x00007f140667c000)
libcrypt.so.1 => /lib/x86_64-linux-gnu/libcrypt.so.1
(0x00007f1406444000)
libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f1406140000)
libpam.so.0 => /lib/x86_64-linux-gnu/libpam.so.0 (0x00007f1405f31000)
libdb-5.3.so => /usr/lib/x86_64-linux-gnu/libdb-5.3.so
(0x00007f1405b71000)
libldap_r-2.4.so.2 => /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2
(0x00007f1405920000)
liblber-2.4.so.2 => /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2
(0x00007f1405711000)
libmysqlclient.so.18 => /usr/lib/x86_64-linux-gnu/libmysqlclient.so.18
(0x00007f140514b000)
libpq.so.5 => /usr/lib/x86_64-linux-gnu/libpq.so.5
(0x00007f1404f1a000)
libsqlite3.so.0 => /usr/lib/x86_64-linux-gnu/libsqlite3.so.0
(0x00007f1404c17000)
libsasl2.so.2 => /usr/lib/x86_64-linux-gnu/libsasl2.so.2
(0x00007f14049fa000)
libperl.so.5.24 => /usr/lib/x86_64-linux-gnu/libperl.so.5.24
(0x00007f1404608000)
libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f1404404000)
libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0
(0x00007f14041e7000)
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f1403e49000)
libgnutls.so.30 => /usr/lib/x86_64-linux-gnu/libgnutls.so.30
(0x00007f1403ae6000)
libpcre.so.3 => /lib/x86_64-linux-gnu/libpcre.so.3
(0x00007f1403871000)
/lib64/ld-linux-x86-64.so.2 (0x0000555e7300e000)
libaudit.so.1 => /lib/x86_64-linux-gnu/libaudit.so.1
(0x00007f1403649000)
libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f140342e000)
libstdc++.so.6 => /usr/lib/x86_64-linux-gnu/libstdc++.so.6
(0x00007f14030ad000)
libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1
(0x00007f1402e96000)
libssl.so.1.0.2 => /usr/lib/x86_64-linux-gnu/libssl.so.1.0.2
(0x00007f1402c2c000)
libcrypto.so.1.0.2 => /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.2
(0x00007f14027c6000)
libgssapi_krb5.so.2 => /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2
(0x00007f140257b000)
libp11-kit.so.0 => /usr/lib/x86_64-linux-gnu/libp11-kit.so.0
(0x00007f1402316000)
libidn.so.11 => /lib/x86_64-linux-gnu/libidn.so.11
(0x00007f14020e2000)
libtasn1.so.6 => /usr/lib/x86_64-linux-gnu/libtasn1.so.6
(0x00007f1401ecf000)
libnettle.so.6 => /usr/lib/x86_64-linux-gnu/libnettle.so.6
(0x00007f1401c96000)
libhogweed.so.4 => /usr/lib/x86_64-linux-gnu/libhogweed.so.4
(0x00007f1401a61000)
libgmp.so.10 => /usr/lib/x86_64-linux-gnu/libgmp.so.10
(0x00007f14017de000)
libcap-ng.so.0 => /lib/x86_64-linux-gnu/libcap-ng.so.0
(0x00007f14015d8000)
libkrb5.so.3 => /usr/lib/x86_64-linux-gnu/libkrb5.so.3
(0x00007f1401300000)
libk5crypto.so.3 => /usr/lib/x86_64-linux-gnu/libk5crypto.so.3
(0x00007f14010d0000)
libcom_err.so.2 => /lib/x86_64-linux-gnu/libcom_err.so.2
(0x00007f1400eca000)
libkrb5support.so.0 => /usr/lib/x86_64-linux-gnu/libkrb5support.so.0
(0x00007f1400cbe000)
libkeyutils.so.1 => /lib/x86_64-linux-gnu/libkeyutils.so.1
(0x00007f1400aba000)
libffi.so.6 => /usr/lib/x86_64-linux-gnu/libffi.so.6
(0x00007f14008b1000)
> dpkg -l | grep dmo
dpkg -l | grep dmo
=> empty output
Only package libtpm-unseal1 were removed from testing and is installed.
No outdated packages.
I reverted the exim4 from backup, because I switched to postfix yesterday (to
resolve the error finally).
Further tests are difficult ;)
cu Sascha
