Bug 1290043
| Summary: | mailx always fails smtp send when -S ssl-verify=strict | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Martin Poole <mpoole> | ||||
| Component: | mailx | Assignee: | Nikola Forró <nforro> | ||||
| Status: | CLOSED ERRATA | QA Contact: | Robin Hack <rhack> | ||||
| Severity: | unspecified | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | 7.2 | CC: | kvolny, nforro, ovasik, rhack | ||||
| Target Milestone: | rc | Keywords: | EasyFix, Patch | ||||
| Target Release: | --- | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | mailx-12.5-14.el7 | Doc Type: | Bug Fix | ||||
| Doc Text: |
Cause: There was a bug in nss_check_host function returning failure when matching SAN hostname was found in certificate.
Consequence: mailx with strict SSL verification enabled failed to connect to a server with SAN hostname in certificate.
Fix: nss_check_host function was fixed to return proper value.
Result: mail with strict SSL verification is now able to connect to a server with SAN hostname in certificate.
|
Story Points: | --- | ||||
| Clone Of: | |||||||
| : | 1290072 1296536 (view as bug list) | Environment: | |||||
| Last Closed: | 2017-08-01 16:08:38 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Bug Depends On: | |||||||
| Bug Blocks: | 1290072, 1296536, 1298243, 1380364, 1393870, 1400961 | ||||||
| Attachments: |
|
||||||
Created attachment 1112441 [details]
nss_check_host fix
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:1869 |
Description of problem: mailx always fails when attempting to perform an SMTP send to a secure server if strict verification is set, regardless of nss-config-dir contents. Version-Release number of selected component (if applicable): How reproducible: Always Steps to Reproduce: mailx -S smtp=smtps://smtp.example.com:465 \ -S ssl-verify=strict \ -S nss-config-dir=/etc/pki/nssdb \ -s 'Testing secure send' \ user Actual results: Resolving host smtp.example.com . . . done. Connecting to 192.168.0.10:465 . . . connected. Comparing DNS name: "smtp.example.com" "/home/joe/dead.letter" 14/382 . . . message not sent. Expected results: mail should be sent. Additional info: Send fails regardless of contents of nss db in referenced directory.