7 April 2007 - 7:11Mail Toaster, Qmail, and OpenSSL 0.9.8e Workaround and Fix

Recently, a friend of mine sent an e-mail to me that bounced. After checking his server logs, he was receiving the following error:

TLS_connect_failed:_error:14077410:SSL_routines:SSL23_GET_SERVER_HELLO:sslv3_alert_handshake_failure

It was a very interesting error to say the least. After some digging, I found that the new OpenSSL breaks mail. They claimed that this was due to an API change, but looking at the change list between 0.9.8d and 0.9.8e, no API change was noted. After some digging, I found that the problem is a programming error in the TLS patch for qmail. Read on for details.