157953 - STARTTLS=server: 1544:error:1408F071:SSL routines:SSL3_GET_RECORD:bad mac decode:s3_pkt.c:383

Status: VERIFIED WORKSFORME

(MailNews Core :: Networking: SMTP, defect)

Description

[Jason A. Lunn]

When attempting to send an email via SMTP using Mozilla 1.0 (Mozilla/5.0
(Macintosh; U; PPC; en-US; rv:1.0.0) Gecko/20020529) to a server running
Sendmail 8.12.4-1 using SSL and SMTP Auth, the SSL negotiation fails, leaving
the following message in the maillog:

STARTTLS=server: 1544:error:1408F071:SSL routines:SSL3_GET_RECORD:bad mac
decode:s3_pkt.c:383

This failure occurs before the SMTP auth is attempted, and cause the SMTP
session to terminate, resulting an error dialog being shown to the user
indicating that the server received a bad Message Authenticaion code.

Similar failures have been found in the Mozilla 1.0 client for GNU/Linux and for
Netscape 6.2.3 for Mac OS 9.

I would be happy to provide the name of the server through an offline channel
for debugging purposes.

I would assume that this was an OpenSSL issue (0.9.6b on RH7.3/intel), but all
of our other SMTP clients work properly, including Mulberry, Entourage for OS X,
Outlook Express for Win 98SE, and Mail.app for OS X. I have also tested the
STARTTLS functionality using the starttls patch to openssl
(http://www.sendmail.org/~ca/email/patches/starttls.tar.gz), and it also tells
me that the SSL negotiation works fine.

I have tried a number of different cipher suite configurations, and cannot find
any that work.

Comment 1

[Matthias Versen [:Matti]]

-> PSM

Comment 2

[John Unruh]

Sending to networking:SMTP. Probably a dupe of bug 153790. The reporter sent me 
a username and password to confirm the bug.

Comment 3

[John Unruh]

Marking works for me per reporter's comment "We have noticed that we no longer 
experience this bug when using Mozilla 1.1."

Comment 4

[Sheela Ravindran]

verifying per comment #3