OK. Got it. The package who messed up my TLS setup with OE was: ca-certificates which was automatically installed when I installed: fetchmail
What I did to resolve the problem: 1. remove ca-certificates with aptitude 2. rm /etc/ssl/certs/ca-certificates.crt This is a brutal solution, but I don't need ca-certificates for now. In addition, I can see this with Ethereal: Common-part of the connection: ----- S> 220 servername\r\n C< EHLO clientname\r\n S> 250-servername Hello clientname [ip]\r\n S> 250-SIZE 52428800\r\n S> 250-PIPELINING\r\n S> 250-STARTTLS\r\n S> 250 HELP\r\n C< STARTTLS\r\n S> 220 TLS go ahead\r\n C< (156 bytes on wire) S> (133 bytes on wire) S> (774 bytes on wire, I can recognize some parts of my self-certificate here) ----- Then, when ca-certificates is not installed: ----- S> (77 bytes on wire) S> (60 bytes on wire) S> (91 bytes on wire) C< (87 bytes on wire) S> (206 bytes on wire) .... and all goes well ----- When ca-certificates is installed: ----- S> (1514 bytes on wire, I can see parts of other CA strings there) S> (1514 bytes on wire, I can see parts of other CA strings there) S> (1514 bytes on wire, I can see parts of other CA strings there) S> (1514 bytes on wire, I can see parts of other CA strings there) S> (1514 bytes on wire, I can see parts of other CA strings there) S> (1514 bytes on wire, I can see parts of other CA strings there) S> (1514 bytes on wire, I can see parts of other CA strings there) S> (1514 bytes on wire, I can see parts of other CA strings there) S> (1514 bytes on wire, I can see parts of other CA strings there) S> (1514 bytes on wire, I can see parts of other CA strings there) S> (1514 bytes on wire, I can see parts of other CA strings there) S> (383 bytes on wire, I can see parts of other CA strings there) S> (1514 bytes on wire, I can see parts of other CA strings there) C< [FIN, ACK] C< [SYN] S> [SYN, ACK] C< [ACK] C< EHLO clientname S> (1364 bytes on wire, keeps sending other CA strings) S> (63 bytes on wire) C< [RST, ACK] S> [ACK] S> [SYN] C< [RST, ACK] S> 554 SMTP synchronization error\r\n C< HELO clientname\r\n S> [ACK] S> [RST, ACK] ----- Hope this helps identifying the problem. Regards, Diego -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
