Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Exim Advanced Editor configuration changes not synced

Discussion in 'E-mail Discussion' started by nosajix, Feb 10, 2018.

  1. nosajix

    nosajix Active Member

    Joined:
    Jul 30, 2005
    Messages:
    30
    Likes Received:
    1
    Trophy Points:
    158
    I too am getting the error
    Code:
    TLS handshaking: SSL_accept() failed: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher
    -> it happens when I try to connect using the mail program that comes with 2 seperate samsung devices, a s8 and a Galaxy Tab A running Android 7 with current updates.

    Now heres the funny part, I attempted the above mentioned changes:

    Options for OpenSSL: +no_sslv2
    SSL/TLS Cipher Suite List: ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:!DSS

    It seemed I had to change them both in the basic editor AND the advanced editor (changes didnt translate over) but STILL i get the same error.

    I even tried to select the scary "Allow weak SSL/TLS ciphers" in the basic mode - couldnt find anything in the advanced. Still - same error and I am trying to tell my clients their modern devices from Google and Samsung are inferior. Its just not working out...

    Centos 7.4 cpv 68.0.28
     
    #1 nosajix, Feb 10, 2018
  2. nosajix

    nosajix Active Member

    Joined:
    Jul 30, 2005
    Messages:
    30
    Likes Received:
    1
    Trophy Points:
    158
    *FIX*

    Ok, so I reverted my exim config in both basic AND advanced (why they dont write eachother is still a mystery to me) BUT I replaced the Cipher list in my "mailserver configuration" (Home »Service Configuration »Mailserver Configuration) with this list:
    Code:
    ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:!DSS
    and voila connection made - no error 1408A0C1.

    I'm having a beer now. Please let me know if I just opened up my servers to the Ruskie election hackers.
    .
     
    #2 nosajix, Feb 10, 2018
    Last edited by a moderator: Feb 12, 2018
  3. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,214
    Likes Received:
    1,937
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    The changes should in-fact remain synced. Feel free to open a support ticket if you'd like us to take a closer look to see why that's not happening on your system.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 cPanelMichael, Feb 12, 2018
  4. rarod

    rarod Active Member

    Joined:
    Apr 20, 2017
    Messages:
    33
    Likes Received:
    1
    Trophy Points:
    8
    Location:
    Spain
    cPanel Access Level:
    Root Administrator
    The same for me. does anyone know if this is the expected behaviour?
     
    #4 rarod, Feb 14, 2018
  5. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,214
    Likes Received:
    1,937
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    I moved these posts to a separate thread as it relates to a different issue (changes made in the Exim Advanced Editor not syncing).

    Could you verify the exact steps you are taking and the version of cPanel installed on your system so we can attempt to reproduce this behavior? Also, does the /etc/exim.conf.local file exist on the system?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #5 cPanelMichael, Feb 14, 2018
  6. rarod

    rarod Active Member

    Joined:
    Apr 20, 2017
    Messages:
    33
    Likes Received:
    1
    Trophy Points:
    8
    Location:
    Spain
    cPanel Access Level:
    Root Administrator
    I tried to reproduce this, now when I modify in basic the change is done in advanced too.
     
    #6 rarod, Feb 16, 2018
  7. nosajix

    nosajix Active Member

    Joined:
    Jul 30, 2005
    Messages:
    30
    Likes Received:
    1
    Trophy Points:
    158
    I apologize, I don't seem to be receiving forum notifications.

    The problem may be getting deeper as I now am having trouble accepting emails from some places and getting :
    [(SSL_accept) error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol] on some incoming messages.
     
    #7 nosajix, Feb 27, 2018
  8. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,214
    Likes Received:
    1,937
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    That can happen if the client attempting to send the email isn't using a supported protocol. The topic is discussed on the following thread:

    TLS error on connection issue

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #8 cPanelMichael, Feb 28, 2018
  9. nosajix

    nosajix Active Member

    Joined:
    Jul 30, 2005
    Messages:
    30
    Likes Received:
    1
    Trophy Points:
    158
    cPanelMichael - thanks for your input but this is a fairly common mailer that is triggering this, is it really likely that Expedia is sending emails with this insecure protocol?
     
    #9 nosajix, Feb 28, 2018
  10. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,214
    Likes Received:
    1,937
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Could you open a support ticket using the link in my signature so we can take a closer look?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #10 cPanelMichael, Feb 28, 2018
  11. nosajix

    nosajix Active Member

    Joined:
    Jul 30, 2005
    Messages:
    30
    Likes Received:
    1
    Trophy Points:
    158
    Im gonna hold off on the support ticket because the server company is working on it atm. I temporarily removed the +no_ssl2 flag from the exim config and the messages are now coming in. a bandaid I know but it just doesnt seem right.
     
    #11 nosajix, Feb 28, 2018
(You must log in or sign up to post here.)
Loading...
Similar Threads - Exim Advanced Editor
  1. WifiOneOne

    Can't edit certain blocks in Exim Advanced Editor

    WifiOneOne, Oct 24, 2018, in forum: E-mail Discussion
    Replies:
    1
    Views:
    70
    cPanelMichael
    Oct 25, 2018
  2. Chris1904

    How to properly route_list in Exim's advanced editor?

    Chris1904, May 21, 2017, in forum: E-mail Discussion
    Replies:
    2
    Views:
    652
    cPanelMichael
    May 24, 2017
  3. kernow

    In Progress [CPANEL-23903] tailwatchd warnings logged when enabling more than one alternate Exim port

    kernow, Nov 12, 2018, in forum: General Discussion
    Replies:
    8
    Views:
    107
    kernow
    Nov 12, 2018
  4. Mike S

    Rewrite forwarded email headers in EXIM to avoid strict DMARC/SPF block ?

    Mike S, Nov 8, 2018, in forum: E-mail Discussion
    Replies:
    1
    Views:
    115
    cPanelMichael
    Nov 12, 2018
  5. Mustafa Chapal

    Configure Exim to Send Email From a Subaccount

    Mustafa Chapal, Nov 1, 2018, in forum: E-mail Discussion
    Replies:
    3
    Views:
    95
    cPanelMichael
    Nov 5, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice