Notes/Domino 6 and 7 Forum : SSL TLS SMTP setup and configuration issues

Could I firstly ask for a straw poll to see who has actually got this working? Not forgetting that if a STARTTLS session fails the SMTP server will retry in clear text, so if you are not running the debug commands and checking the logs it may not be working.

There seem to be several variables here that are difficult to pin down. In essence the SSL certificate is a 128Bit Certificate issued by a Domino CA using the request database. There are several options in the Key when signing by the CA that is not well documented.

Is there anybody with some real world experience in TLS? I am happy to share my findings but I must admit I cannot get it to work!

The debug commands are:

SMTPDebug=3
SMTPDebugIO=3
SMTPCLIENTDEBUG=3
TraceSSLHandshake=1
ReportSSLHandshakeErrors=1
SmtpSaveOutboundToFile=1
debug_outfile=c:\trace\ssloutfile.txt

A typical client session would be:

250-TLS
250-HELP
250-AUTH LOGIN
250-STARTTLS
250-SIZE
250 PIPELINING
STARTTLS
220 Ready to start TLS
Server key (1024 bits) too strong for EXPORT ciphers. Disabling cipher RSA_EXPORT_WITH_RC4_40_MD5
SSL handshake error: 1C7Ah
Attempting to Disconnect:
CommandQUIT:
Connection terminated with status: 2562

And the server would see

State change from Greeting to Greeting
Processing in Greeting state
State change from Greeting to Connected
Processing in Connected state
EHLO command received
Processing in Connected state
STARTTLS command received
Processing in Connected state
STARTTLS command (cont.)
SSL Error: Keyring File access error
State change from Greeting to Greeting