hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Use this forum if you want to discuss a problem or ask a question related to a hMailServer beta release.
Post Reply
User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-04-25 09:56

Changes:
This release includes all fixes from B2425, B2426 and B2427.
Its 64-Bit only and cannot run on 32-Bit Windows.

*OpenSSL 1.0.2r update
*SASL Params doesnt generate a error log anymore
*Special Tests fo Windows Server 2012 R2 [OK]

*Virustotal
*SHA-256 Hash: c828a12229fe7ff22c71aef18cc8305499f089cc0bb540403c75e312182f2a71
*Scan Results: https://www.virustotal.com/gui/url/7416 ... /detection
https://github.com/Dravion/hMailServer/releases

Direct Download: https://github.com/Dravion/hMailServer/ ... 28-x64.exe

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-26 14:57

Code: Select all

"ERROR"	3092	"2019-04-26 15:30:02.694"	"Severity: 2 (High), Code: HM4208, Source: ExceptionHandler::Run, Description: An error occured while executing 'IOCPQueueWorkerTask'"
"ERROR"	3092	"2019-04-26 15:30:02.866"	"Severity: 1 (Critical), Code: HM5519, Source: StackLogger::Log, Description: An error has been detected. A mini dump has been written to C:\hMailServer\Logs\minidump_2019-04-26 153002_{35A0F6D6-E943-46D6-99A2-795E06A441FB}.dmp"
dump attached..
Attachments
minidump_2019-04-26 153002_{35A0F6D6-E943-46D6-99A2-795E06A441FB}.zip
(29.32 KiB) Downloaded 34 times
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-04-26 15:52

Try the following

1) Open a Windows Elevated Command prompt
2) type in bcdedit /set nx OptOut + ENTER
3) Restart
4) After Restart, goto Windows Panel, Select System and Securty and Select "System"
5) In the System Dialog clock Advanced system settings -> Tab Avanced -> Performance Button "Settings..."
6) Select Data Execution Prevention and toggle Turn on DEP for essential Windows programs and services only
7) Restart and run hMailServer again.

If hMailServer crashes agan and a new dump file is created, pls attache it and provide the log entries from ERROR
or normal log of the last 10 entries.
Attachments
dep.png

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-26 16:46

Dravion wrote:
2019-04-26 15:52
1) Open a Windows Elevated Command prompt
2) type in bcdedit /set nx OptOut + ENTER
3) Restart
4) After Restart, goto Windows Panel, Select System and Securty and Select "System"
5) In the System Dialog clock Advanced system settings -> Tab Avanced -> Performance Button "Settings..."
6) Select Data Execution Prevention and toggle Turn on DEP for essential Windows programs and services only
7) Restart and run hMailServer again.
done one by one. i'll report back in 2 hours or so. thks.
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-26 18:26

no good news. all is attached.
log entries 18:00+ are after DEP switch. fyi..
Attachments
errorlog & dumps.zip
(117.95 KiB) Downloaded 35 times
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-04-26 20:12

Ok,
Can you please

1) Download and unzip the attached archive and copy it to hMailServer\bin folder (rename the existing hmailserver.exe)
2) Open a Elevated Windows Command prompt and change Directory to for example: C:\Program Files\hMailServer\Bin (you install location)
3) hmailserver /register | net start hmailserver and hit ENTER

hMailServer-x64-5.7.0-NX-FIX.zip
(1.95 MiB) Downloaded 46 times

Test again if the Error in your logs persists or something is changing.

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-26 21:55

Dravion wrote:
2019-04-26 20:12
Test again if the Error in your logs persists or something is changing.
no luck :(
Attachments
Logs.zip
(30.83 KiB) Downloaded 35 times
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-04-27 00:22

More information is required.
The Logfile only contains information that a Error was detected and a Dump file was created. The Dump says its an STATUS_ACCESS_VIOLATION
while a BOOST ASIO Worker Thread is running.

Thats very generic and can be a Filesystem Operation or a Network TCP/IP-Socket Task.

Did you enable any checkboxes in hMailAdmin
Logging?

Do also Check Windows Application and Systemlog for Errors and Warnings.

Can you describe what you did as the Error occured?

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-27 05:52

i turned on all logs (smtp, app, tcp, debug). this came out:

Code: Select all

"DEBUG"	3004	"2019-04-27 06:26:12.850"	"No messages to index."
"DEBUG"	3004	"2019-04-27 06:27:12.789"	"No messages to index."
"DEBUG"	3004	"2019-04-27 06:28:12.789"	"No messages to index."
"DEBUG"	3004	"2019-04-27 06:29:12.790"	"No messages to index."
"DEBUG"	3004	"2019-04-27 06:30:12.790"	"No messages to index."
"DEBUG"	3004	"2019-04-27 06:31:12.790"	"No messages to index."
"DEBUG"	3004	"2019-04-27 06:32:12.791"	"No messages to index."
"DEBUG"	3004	"2019-04-27 06:33:12.807"	"No messages to index."
"DEBUG"	3004	"2019-04-27 06:34:13.791"	"No messages to index."
"DEBUG"	572	"2019-04-27 06:34:58.307"	"Ending session 6"
"ERROR"	572	"2019-04-27 06:34:58.323"	"Severity: 2 (High), Code: HM4208, Source: ExceptionHandler::Run, Description: An error occured while executing 'IOCPQueueWorkerTask'"
"DEBUG"	572	"2019-04-27 06:34:58.323"	"Logging exception.."
"ERROR"	572	"2019-04-27 06:34:58.526"	"Severity: 1 (Critical), Code: HM5519, Source: StackLogger::Log, Description: An error has been detected. A mini dump has been written to C:\hMailServer\Logs\minidump_2019-04-27 063458_{03B2BCE7-E7B1-448D-B4AF-E3E799862FF2}.dmp"
"DEBUG"	572	"2019-04-27 06:34:58.526"	"Completed logging of exception..."
"DEBUG"	3004	"2019-04-27 06:35:13.807"	"No messages to index."
"DEBUG"	3004	"2019-04-27 06:36:14.792"	"No messages to index."
"DEBUG"	3004	"2019-04-27 06:37:14.808"	"No messages to index."
no conversation, nothing, strange...

it's a w2k8r2 server with all updates, VM, home setup, low traffic. SA and ClamAV are on another VM (Ubuntu). as i told before 5.6.8-B2431 was working perfect without a single error since about 7 months.
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-04-27 08:50

Ok, this looks more detailed.

I believe 5.6.8 was built wit LibreSSL instead with OpenSSL 1.0.2.x. i will take a look into it.

Can you copy and insert your hMailServer.ini
file into your next reply? Just remove your DB-Password and Admin password.

Meanwhile, can you temporarly disable your Antivirus hMailServer run some time? If a Crashdump is created while Antivirus is of, please
attache the Dump file into your next post.

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-27 09:29

AV was already off since some time.
//EDIT: I mean it's on Ubuntu VM, called from within SA. i can turn off SA too if it'd help??
INI here:

Code: Select all

[Directories]
ProgramFolder=C:\hMailServer
DatabaseFolder=
DataFolder=C:\hMailServer\Data
LogFolder=C:\hMailServer\Logs
TempFolder=C:\hMailServer\Temp
EventFolder=C:\hMailServer\Events
[GUILanguages]
ValidLanguages=english,swedish
[Security]
AdministratorPassword=...
[Database]
Type=MYSQL
Username=...
Password=...
PasswordEncryption=1
Port=3306
Server=127.0.0.1
Database=hmail
Internal=0
[Settings]
DisableAUTHList=25
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-04-27 12:42

No, Spamassin should not the Problem here.
Antivirus could cause file locks but if its turned off it cannot cause such Problems file locking
Problems.

Some questions:
*Do you run hMailServer in your Office LAN behind a NAT Router/DSL-Router and do you use a external Relayserver?
OR
*Do you run your Windows 2008 x64 SP2-Server on a static (not DHCP), public Internet IPv4 Address?

Do you use any SSL-Certificates?
If you do, can you disable and remove your SSL-Certificates from your hMailServer Configuration and
Setup (or use existing Accounts hMailServer Email accounts) to send Emails among the diffrent Email accounts
while SSL is turned off?

It would help a lot to know if Crashdumps are created while SSL is completely turned off because SSL-Code
isnt used anywhere if you dont use SSL-Certificates . This way we can make sure the Error is caused by OpenSSL
or BOOST Thirdparty Framework operations.

However:
I will setup a Windows Server 2008 R2 x64 SP1, install .NET 3.5.1 from built in Windows Features and install all Windows+Microsoft
Updates which are avaiable (not cherry picking some patches).

As far as i can see, the Problem begins if hMailServer is allready successfully installed and running and processing the Mailque.

There are a few Users getting HM5019 Error as well with non LTS Releases.
Some say its DKIM related, some talking about Storage/Harddisk/SATA issues.

What version of ORACLE Virtualbox do you run (the new Major version 6 or old 5.x)?
Did you install Virtualbox Guest Extensions (Harddrive, Video Driver for Virtualbox)?

If not, goto Virtualbox Mainmenue -> Devices -> and click "Insert Guest Additions CD Image..."
Install Virtual Guest Additions by CD/DVD Autorun or doubleclick on "VBoxWindowsAdditions-amd64.exe"
and restart your VM.


ps: Please post your exact MySQL details. I want to prepare my Windows 2008 R2 VM allmost identically as possible.
This will help to get closer to the Problem.

User avatar
SorenR
Senior user
Senior user
Posts: 3210
Joined: 2006-08-21 15:38
Location: Denmark

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by SorenR » 2019-04-27 13:16

Just a thought... If it is a VM ... a binary representation of a computer ... it can be copied and loaded somewhere else ... electronically ... or?
SørenR.

“With age comes wisdom, but sometimes age comes alone.”
- Oscar Wilde

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-04-27 13:32

SorenR wrote:
2019-04-27 13:16
Just a thought... If it is a VM ... a binary representation of a computer ... it can be copied and loaded somewhere else ... electronically ... or?
No really a binary representation of Hardware like CPU's ect. if we talking about ORACLE Virtualbox, VMware, MS Hyper V or Qemu+KVM.

There are Emulators out there like BOCHS which are trying to even simulate the CPU while Virtualbox and Friends redirecting
Guest calls to the Host CPU for and back. Its more Parav irtualized then complete Virtualization for performance reasons.

PS:
I found the Position in hMailServers Core Code which causes the STATUS_ACCESS_VIOLATION.
It happens inside the BOOST Framework at a IOService Operation. In other words, its 100% Network TCP related, not Storage or Filesystem).

As far as i can understand it, there is loop which is trying to dynamically create and bind sockets to the Network card.

@Katip: Please open hMailAdmin and goto Settings->Advanced->TCP/IP ports and delete any ports, leave
hMailAdmin, stop hMailServer Sevice, start it again, relogin to hMailAdmin and assign the TCP/IP Ports again.
If anything is set to 0.0.0.0 or 127.0.0.1, try to assign your real, static Windows Server 2008 R2 configures Network card
address to it.

ReRun hMailServer and lookout for new Error logs and Crashdumps.

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-04-27 18:24

Ok, i tested this release forth and back with some bulk mail operations, letting hMailServer process a whole bunch of
Emails
BULK-T~2.jpg
BULK-T~1.jpg
No Error in the log, no crashdump, everything works as expected.

However: This test was running in a VM with Windows Server 2008 R2 with all updates
installed. Only .NET Framework 3.x was installed from the Windows Server 2008 R2 Install DVD.
All updates via Windows Update for Windows + Microsoft Updates installed on top of it (today 27/4/2019)

hMailServer Version: hMailServer-LTS-5.7.0-B2428-x64.exe
https://github.com/Dravion/hMailServer/ ... 28-x64.exe

MySQL-Community Version 5.26 (mysql-installer-community-5.7.26.0.msi)

All mails are fired against hMailServer from a Exim4 MTA against a fully DNS-Configured hMailServer with its MX record:

Exim4: mail.hms5-testlab.com to -> hMailServer: smtp.hms5-testlab.com

Even sending from other Domains doesnt change anything, everything works as expected...

Because in this test, hMailServer didnt had a SSL-Certificate in configured, so i will add this to the testcase
and repeat it.

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-04-27 19:39

Allright,

hMailServer 5.7.0 64-Bit SSL configured and configuration is valid (see openssl verification logs and hMailServers SSL Logs below)

#Results:
*Connecting to hMailServer via SSL/TLS [OK]
*Cypher Negotiation and Transportlayer [OK]

No Crashdumps, Error or Warnings in the logs so far.

Now i configure the Exim4 SMTP MTA so it can sent SSL/TLS Emails and setting Port 25 on hMailServer side to STARTTLS required
so Emails will only accepted by hMailServer via SSL/TLS, not without it so we can proof its a complete SSL/TLS Processing step - see next reply.

# SMTP - openssl verification checks - Port 25 and 587

$ openssl s_client -connect smtp.hms5-testlab.com:25 -starttls smtp -CAfile ../certs/ca/ca.cert.pem
CONNECTED(00000004)
depth=1 C = DE, ST = Baden Wuerttemberg, L = Freiburg, O = Dravionsrealm CA, OU = Security Department, CN = dravionsrealm.net, emailAddress = info@dravionsrealm.net
verify return:1
depth=0 C = DE, ST = Baden Wuerttemberg, L = Freiburg im Breisgau, O = Dravions Realm Inc., OU = IT Department, CN = smtp.hms5-testlab.com
verify return:1
---
Certificate chain
0 s:C = DE, ST = Baden Wuerttemberg, L = Freiburg im Breisgau, O = Dravions Realm Inc., OU = IT Department, CN = smtp.hms5-testlab.com
i:C = DE, ST = Baden Wuerttemberg, L = Freiburg, O = Dravionsrealm CA, OU = Security Department, CN = dravionsrealm.net, emailAddress = info@dravionsrealm.net
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIFSTCCAzGgAwIBAgIUKbH5qstxSCxhXNe40o46ErPwS0EwDQYJKoZIhvcNAQEL
BQAwgbkxCzAJBgNVBAYTAkRFMRswGQYDVQQIDBJCYWRlbiBXdWVydHRlbWJlcmcx
ETAPBgNVBAcMCEZyZWlidXJnMRkwFwYDVQQKDBBEcmF2aW9uc3JlYWxtIENBMRww
GgYDVQQLDBNTZWN1cml0eSBEZXBhcnRtZW50MRowGAYDVQQDDBFkcmF2aW9uc3Jl
YWxtLm5ldDElMCMGCSqGSIb3DQEJARYWaW5mb0BkcmF2aW9uc3JlYWxtLm5ldDAe
Fw0xOTA0MjcxNjUzNDdaFw0yMDA5MDgxNjUzNDdaMIGfMQswCQYDVQQGEwJERTEb
MBkGA1UECAwSQmFkZW4gV3VlcnR0ZW1iZXJnMR0wGwYDVQQHDBRGcmVpYnVyZyBp
bSBCcmVpc2dhdTEcMBoGA1UECgwTRHJhdmlvbnMgUmVhbG0gSW5jLjEWMBQGA1UE
CwwNSVQgRGVwYXJ0bWVudDEeMBwGA1UEAwwVc210cC5obXM1LXRlc3RsYWIuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEaeeu1aF1VGtMwubh1r
beW6CQbUXhdNZOA3mVmJ0Yuf6aMMz2+ZKAKz2VmbjbO/ccDJBr5ZsTfz481ZT8ij
m7zDBBmqmTpwO4Fr/RWYYsHrDTwwMys5cqcKazAGfcfNOcEXNunENbitHG633urW
sfn2TL3+7EoQf8ItpTcSQ8u3UPTsogDwgR3HFHARBb29+Cwg+cxuKvA3S6NpnkDH
gbsZCQjqDdgzmJsTedLp2y3RFsjDmJM3zD7iGRf8+Jqrbra2idP6rrYHfYch4W3s
nEJILFfe8YwSDEJEyYho3VEgqtKM78xsgROzomntQyAb4VCtNjuPgoWjN59Yyakf
tQIDAQABo2EwXzAdBgNVHQ4EFgQU6n7vrRneOqhbHYWjO5lOP0ZMjdUwDAYDVR0T
AQH/BAIwADAgBgNVHREEGTAXghVzbXRwLmhtczUtdGVzdGxhYi5jb20wDgYDVR0P
AQH/BAQDAgWgMA0GCSqGSIb3DQEBCwUAA4ICAQAxwzDcU0a6GX+w4kboCvxSX5IF
6U6bdV/htVi5Z6XMYH5H1W/ZQnzAoNycUuasaYFxQGnFHUbpnywoXCdIV4ULMgUg
yVRtLLJrNumJHrL/qXmRr/8bqK7ImGlQnI8QwXUrSmMEnizQLLFwsKbOANYXYl9l
M5Hgz2EJPRnNplM8bn5Wk856iagP+KnvD9jfrCX5M5I+uVFymW2poR3X1dCXfQ15
l6xe/Fd69uLDSRVOb3l+E9BBSD5O+frZvicHvRciJsbfbEJGj1Kc529rFFyVtqjm
Q97WCiTTOg55ubkKDhHOYSLR6BU+BmO/uaT77TRG1a2nxM2UJOYp2CMCZFgOFuvu
gTzYyrgPQiY7L8tx2otu6YiD5X7Br4i2FOVHE1KEW0YBaShnW3qKAQyjYzsIEYNk
oGKx36gojX7d+vuKVMn3hlNxwYCGUvE5BGk2PJn2sdB9HYBt1f/PU1FvB+ETbNWY
lf/VikhEnQPozhSR6RuiFKs5Wn9LUpNkDkCF5/TtzLBfkN2+pBCbRU60CXcAocgN
JhF5CcGxXPne63p0Lpu+V2x7iORm54q+Qavv7a58c0gXazx2pUK5/hCPEs+R8qL3
NUK9ISI/cKVmJrulSs7xbtuBmc8zVQkHVZwYLU8uYjW8clVTdX+zW0yQFkt1nKWV
6OsvLWV1wgbz39Xmzw==
-----END CERTIFICATE-----
subject=C = DE, ST = Baden Wuerttemberg, L = Freiburg im Breisgau, O = Dravions Realm Inc., OU = IT Department, CN = smtp.hms5-testlab.com

issuer=C = DE, ST = Baden Wuerttemberg, L = Freiburg, O = Dravionsrealm CA, OU = Security Department, CN = dravionsrealm.net, emailAddress = info@dravionsrealm.net

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 2164 bytes and written 492 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: 416975768150AA5420AB09ABD60A18D7FE01ADA228A011A189D5CE54976441F7
Session-ID-ctx:
Master-Key: 38C5DB687A1683CA824689053099280F444CA4D5BA110BEA084E68DC333CB922AD4CFD23BD8A14E4299647CFA085EBA9
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 300 (seconds)
TLS session ticket:
0000 - 89 96 1e ca d7 5c 75 9a-e5 04 82 48 6d cb 47 55 .....\u....Hm.GU
0010 - 8d 47 e8 45 5b 0b 60 d4-b0 28 d2 fa 55 3e fb a5 .G.E[.`..(..U>..
0020 - b2 4c f2 ab c4 cf ff 1c-5c 32 98 78 94 91 a8 8b .L......\2.x....
0030 - 58 98 ae 39 a8 93 8a 25-b0 f7 d4 49 ba c4 b1 fb X..9...%...I....
0040 - 87 8f b1 2f 5e 5d fe 4f-27 b4 fc 27 cc 60 94 14 .../^].O'..'.`..
0050 - f9 36 df ad 31 73 9f 16-e3 14 d1 03 ff 87 a0 6d .6..1s.........m
0060 - 8a 72 8f 51 b6 c1 be 4a-ab 9f 19 fb 27 aa 02 d2 .r.Q...J....'...
0070 - c7 1c e5 53 cb 7b 29 bf-79 17 30 f9 20 fb 0f dd ...S.{).y.0. ...
0080 - eb a0 6a 38 11 7d fd ce-5a 8c 69 a8 95 22 d8 61 ..j8.}..Z.i..".a
0090 - 86 83 dc 1a c0 2f d2 e0-4e 40 f7 d7 07 c2 37 f1 ...../..N@....7.
00a0 - a6 17 b8 24 dc 34 c7 ad-91 a3 9b 75 91 23 df 51 ...$.4.....u.#.Q

Start Time: 1556385709
Timeout : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: no
---
250 HELP

# END SMTP OpenSSL Test


# START IMAP SSL TEST

$ openssl s_client -connect imap.hms5-testlab.com:143 -starttls imap -CAfile ../certs/ca/ca.cert.pem
CONNECTED(00000004)
depth=1 C = DE, ST = Baden Wuerttemberg, L = Freiburg, O = Dravionsrealm CA, OU = Security Department, CN = dravionsrealm.net, emailAddress = info@dravionsrealm.net
verify return:1
depth=0 C = DE, ST = Baden Wuerttemberg, L = Freiburg im Breisgau, O = Dravions Realm Inc., OU = IT Department, CN = imap.hms5-testlab.com
verify return:1
---
Certificate chain
0 s:C = DE, ST = Baden Wuerttemberg, L = Freiburg im Breisgau, O = Dravions Realm Inc., OU = IT Department, CN = imap.hms5-testlab.com
i:C = DE, ST = Baden Wuerttemberg, L = Freiburg, O = Dravionsrealm CA, OU = Security Department, CN = dravionsrealm.net, emailAddress = info@dravionsrealm.net
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIFSTCCAzGgAwIBAgIUKbH5qstxSCxhXNe40o46ErPwS0MwDQYJKoZIhvcNAQEL
BQAwgbkxCzAJBgNVBAYTAkRFMRswGQYDVQQIDBJCYWRlbiBXdWVydHRlbWJlcmcx
ETAPBgNVBAcMCEZyZWlidXJnMRkwFwYDVQQKDBBEcmF2aW9uc3JlYWxtIENBMRww
GgYDVQQLDBNTZWN1cml0eSBEZXBhcnRtZW50MRowGAYDVQQDDBFkcmF2aW9uc3Jl
YWxtLm5ldDElMCMGCSqGSIb3DQEJARYWaW5mb0BkcmF2aW9uc3JlYWxtLm5ldDAe
Fw0xOTA0MjcxNjU3MTRaFw0yMDA5MDgxNjU3MTRaMIGfMQswCQYDVQQGEwJERTEb
MBkGA1UECAwSQmFkZW4gV3VlcnR0ZW1iZXJnMR0wGwYDVQQHDBRGcmVpYnVyZyBp
bSBCcmVpc2dhdTEcMBoGA1UECgwTRHJhdmlvbnMgUmVhbG0gSW5jLjEWMBQGA1UE
CwwNSVQgRGVwYXJ0bWVudDEeMBwGA1UEAwwVaW1hcC5obXM1LXRlc3RsYWIuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwspE5UBwJMbNPl7cmxrm
a+3WpxnbHu0IK5tdBfONZgQWkBvm8gQeiv6UD7tiqmiJr/gGS0ya03GKnkEHlx8v
pV9bc4BILV3ejxYqD073ZbUrPYA/BvZ/6M8EpibEokBS1p9HgyvPSaN/hg9guTfl
an7WT8BztvbIE3Q9HmV9p+AjU7kokvx5HYfxywIvIhxmeY2p07n2Flr3DywV37XY
FwDkXdJggTJoXD3V1qLhwtJAdL00ANzgbI2iDdMuwtX37n9MxfH4DGd8RiRQV2zy
cf3Hzvfg8PaymfzKkqQaKi9bV5H+IqRyNUIuwcxwU/XZnszJImMQjG5O2RYHPFWL
1QIDAQABo2EwXzAdBgNVHQ4EFgQU2+Ati7AARzGSNtS6p8yzBGGy+9MwDAYDVR0T
AQH/BAIwADAgBgNVHREEGTAXghVpbWFwLmhtczUtdGVzdGxhYi5jb20wDgYDVR0P
AQH/BAQDAgWgMA0GCSqGSIb3DQEBCwUAA4ICAQAqu8q8H3hW0CsyaZ4ukmHZqx0Q
Y6h66xvTku0WAFRZM+zaDuyJiuWHfm6AHkEEHv1KRgE2Lr1I5KTXIcE58uHcQY3p
Pvujy9osI6Y+OUxie6ghhW4KtVflPL+d0lprzHAaWBPRlMr2k4XbOFuzJ7m4fhwC
TEz7QSVzUogPOdZ/acEgYLX+B05jfpHBb2LnFQRrJF8CghaoeQS0Fvw2xFloojug
2lhfDL853IvIm0FauT2gCwW27oAFR8zSXowRLdZ+AXYghdVe/8HHj7nPTfmFgjTV
7ZbpAY82NZmLuUHEF+LddN2EmzUWgQDFdfKiMnKPJ18t3/QXDADxEZeE24BcwxyQ
xHA79YaVHYEeOXbdFF4rmlJztJkkjXNQHj68Jz4ZDn8eQ+d44r/05Xax3uAu9nH+
RjpX+XIkgepm+rf8q4/njZKykRJjsm1CS0bF7a+jBWTYCcjf/VlzkgWKp9oI1+iD
6U5fWbABWfOS+uEgz/Bsp1gnNoLICGEmQ7AqJuWkg0BJTxgZQUXdXKIU3AbATqQc
RbnWVE2zNw8XfrY1b2bfHieTqHeFATuXxSwVkybxckklvmr6plabaeTCa0YIhbBm
bMR89hlY6hKUttF0sckEmPP2qGvTBdR5NY8WRicTFcm12xJNwAxhMe0sABPVESdn
Ioz2RerdNIu9FH8dDg==
-----END CERTIFICATE-----
subject=C = DE, ST = Baden Wuerttemberg, L = Freiburg im Breisgau, O = Dravions Realm Inc., OU = IT Department, CN = imap.hms5-testlab.com

issuer=C = DE, ST = Baden Wuerttemberg, L = Freiburg, O = Dravionsrealm CA, OU = Security Department, CN = dravionsrealm.net, emailAddress = info@dravionsrealm.net

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 2204 bytes and written 485 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: 733CE8E83A02BAA6C0B4278B56F86D74C98F9CDF7A7436730904C31AAEF1EA75
Session-ID-ctx:
Master-Key: 3CE50A8A88CDD122ADFFD961FF85E6BDC550C23D70803ADB966361762C1518880F523C3E8255069D55F8915D1C5D8546
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 300 (seconds)
TLS session ticket:
0000 - 6a 9b af 79 6a 87 77 a2-8b e0 b1 0c 8f 4d 37 13 j..yj.w......M7.
0010 - 73 88 70 c5 de 4b bf d3-20 a8 35 9f 17 fa cc c0 s.p..K.. .5.....
0020 - 59 9a 7f cd 8f 6e dc 1d-da 38 8c ce 06 a7 17 ed Y....n...8......
0030 - 65 bd 01 ce aa e2 e0 d2-53 b1 c4 0e d1 02 ca 4d e.......S......M
0040 - 0f e9 ad 8b 32 3a 67 0a-92 ce 56 de 5e d7 03 6d ....2:g...V.^..m
0050 - 4d 4e bd 99 61 32 f3 32-58 c1 07 0d 1b 64 63 64 MN..a2.2X....dcd
0060 - e0 80 06 79 30 11 d9 c6-19 11 8c 4c 48 fb 11 4c ...y0......LH..L
0070 - de 17 b6 49 c4 6c 2f 61-5c 5d 9b 21 64 7e 66 2f ...I.l/a\].!d~f/
0080 - 9a 0f 11 7a fd 37 b4 4e-ef 84 e6 89 db 5b 97 52 ...z.7.N.....[.R
0090 - 17 93 7a 05 17 5f 88 7d-da 07 e6 c4 2e aa cf 43 ..z.._.}.......C
00a0 - 26 77 4f 25 75 f8 6d d5-de 5c 85 14 f6 3e 1b f2 &wO%u.m..\...>..

Start Time: 1556386088
Timeout : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: no
---
. OK CAPABILITY completed

# END IMAP SSL TEST


# hMailServer TLS Handshake and Connection log

2019-04-27 19:21:06.286" "Performing SSL/TLS handshake for session 6. Verify certificate: False"
"TCPIP" 1940 "2019-04-27 19:21:06.317" "TCPConnection - TLS/SSL handshake completed. Session Id: 6, Remote IP: 220.240.130.70, Version: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384, Bits: 256"
"DEBUG" 2924 "2019-04-27 19:21:13.802" "The read operation failed. Bytes transferred: 0 Remote IP: 220.240.130.70, Session: 6, Code: 335544539, Message: short read"
"DEBUG" 2924 "2019-04-27 19:21:13.802" "Ending session 6"
"DEBUG" 2780 "2019-04-27 19:21:49.739" "Pre-creating session 8"
"TCPIP" 2780 "2019-04-27 19:21:49.739" "TCP - 220.240.130.70 connected to 220.240.130.223:25."
"DEBUG" 2780 "2019-04-27 19:21:49.739" "TCP connection started for session 7"
"SMTPD" 2780 7 "2019-04-27 19:21:49.739" "220.240.130.70" "SENT: 220 smtp.hms5-testlab.com"
"SMTPD" 1940 7 "2019-04-27 19:21:49.739" "220.240.130.70" "RECEIVED: EHLO mail.example.com"
"SMTPD" 1940 7 "2019-04-27 19:21:49.739" "220.240.130.70" "SENT: 250-smtp.hms5-testlab.com[nl]250-SIZE 20480000[nl]250-STARTTLS[nl]250-AUTH LOGIN[nl]250 HELP"
"SMTPD" 2924 7 "2019-04-27 19:21:49.739" "220.240.130.70" "RECEIVED: STARTTLS"
"SMTPD" 2924 7 "2019-04-27 19:21:49.739" "220.240.130.70" "SENT: 220 Ready to start TLS"
"DEBUG" 1940 "2019-04-27 19:21:49.739" "Performing SSL/TLS handshake for session 7. Verify certificate: False"
"TCPIP" 2672 "2019-04-27 19:21:49.755" "TCPConnection - TLS/SSL handshake completed. Session Id: 7, Remote IP: 220.240.130.70, Version: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384, Bits: 256"
"DEBUG" 2924 "2019-04-27 19:25:43.411" "The read operation failed. Bytes transferred: 0 Remote IP: 220.240.130.70, Session: 7, Code: 335544539, Message: short read"
"DEBUG" 2924 "2019-04-27 19:25:43.411" "Ending session 7"
"DEBUG" 2780 "2019-04-27 19:26:08.880" "Pre-creating session 9"
"TCPIP" 2780 "2019-04-27 19:26:08.880" "TCP - 220.240.130.70 connected to 220.240.130.223:587."
"DEBUG" 2780 "2019-04-27 19:26:08.880" "TCP connection started for session 3"
"SMTPD" 2780 3 "2019-04-27 19:26:08.880" "220.240.130.70" "SENT: 220 smtp.hms5-testlab.com"
"SMTPD" 2672 3 "2019-04-27 19:26:08.880" "220.240.130.70" "RECEIVED: EHLO mail.example.com"
"SMTPD" 2672 3 "2019-04-27 19:26:08.880" "220.240.130.70" "SENT: 250-smtp.hms5-testlab.com[nl]250-SIZE 20480000[nl]250-STARTTLS[nl]250-AUTH LOGIN[nl]250 HELP"
"SMTPD" 2924 3 "2019-04-27 19:26:08.880" "220.240.130.70" "RECEIVED: STARTTLS"
"SMTPD" 2924 3 "2019-04-27 19:26:08.880" "220.240.130.70" "SENT: 220 Ready to start TLS"
"DEBUG" 2672 "2019-04-27 19:26:08.895" "Performing SSL/TLS handshake for session 3. Verify certificate: False"
"TCPIP" 1940 "2019-04-27 19:26:08.911" "TCPConnection - TLS/SSL handshake completed. Session Id: 3, Remote IP: 220.240.130.70, Version: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384, Bits: 256"
"DEBUG" 2924 "2019-04-27 19:27:28.911" "The read operation failed. Bytes transferred: 0 Remote IP: 220.240.130.70, Session: 3, Code: 335544539, Message: short read"
"DEBUG" 2924 "2019-04-27 19:27:28.911" "Ending session 3"
"DEBUG" 2780 "2019-04-27 19:27:37.286" "Pre-creating session 10"
"TCPIP" 2780 "2019-04-27 19:27:37.286" "TCP - 220.240.130.70 connected to 220.240.130.223:143."
"DEBUG" 2780 "2019-04-27 19:27:37.286" "TCP connection started for session 2"
"IMAPD" 2780 2 "2019-04-27 19:27:37.286" "220.240.130.70" "SENT: * OK imap.hms5-testlab.com"
"IMAPD" 1940 2 "2019-04-27 19:27:37.286" "220.240.130.70" "RECEIVED: . CAPABILITY"
"IMAPD" 1940 2 "2019-04-27 19:27:37.286" "220.240.130.70" "SENT: * CAPABILITY IMAP4 IMAP4rev1 CHILDREN IDLE QUOTA SORT ACL STARTTLS NAMESPACE RIGHTS=texk[nl]. OK CAPABILITY completed"
"IMAPD" 2924 2 "2019-04-27 19:27:37.286" "220.240.130.70" "RECEIVED: . STARTTLS"
"IMAPD" 2924 2 "2019-04-27 19:27:37.286" "220.240.130.70" "SENT: . OK Begin TLS negotiation now"
"DEBUG" 1940 "2019-04-27 19:27:37.286" "Performing SSL/TLS handshake for session 2. Verify certificate: False"
"TCPIP" 2672 "2019-04-27 19:27:37.302" "TCPConnection - TLS/SSL handshake completed. Session Id: 2, Remote IP: 220.240.130.70, Version: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384, Bits: 256"
"DEBUG" 2924 "2019-04-27 19:27:43.973" "The read operation failed. Bytes transferred: 0 Remote IP: 220.240.130.70, Session: 2, Code: 335544539, Message: short read"
"DEBUG" 2924 "2019-04-27 19:27:43.973" "Ending session 2"

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-27 21:45

*Do you run hMailServer in your Office LAN behind a NAT Router/DSL-Router and do you use a external Relayserver?
yes, behind Untangle Firewall/Router, and yes, Smtp2Go as relayer. but as far as i see, error happens only when receiving. i stressed HMS locally between accounts, no error occured.
Do you use any SSL-Certificates?
If you do, can you disable and remove your SSL-Certificates from your hMailServer Configuration and
Setup (or use existing Accounts hMailServer Email accounts) to send Emails among the diffrent Email accounts
while SSL is turned off?
yes, Let'sEnc. i turned off 25 which was optional, assuming only incoming causes the error. we'll see. no error for the moment. as i told, LAN/LAN is fine even under stress.
What version of ORACLE Virtualbox do you run (the new Major version 6 or old 5.x)?
it's Hyper-V Core 2012 hosted w2k8r2.
ps: Please post your exact MySQL details. I want to prepare my Windows 2008 R2 VM allmost identically as possible.
This will help to get closer to the Problem.
5.6.10-log x64, no install, archive setup.

i'll report back as soon as error occurs. thks.
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-27 22:25

hah, das hat noch gefehlt.
service totally stucks. when i try to stop/restart it, this message comes:
Untitled 1.png
Untitled 1.png (3.5 KiB) Viewed 4810 times
then comes another dump as soon as i click Ok.
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-04-28 00:32

OK, the SSL-Stresstest hMailServer 5.7.0 64-Bit (LTS) April Release with OpenSSL 1.0.2r Stresstest is completed.

Over 5000+ Emails where generated by Bash Script on a Linux box (Hardware Server 4 GBytes RAM, Debian9.x 32-Bit) and fired against
hMailServer 5.7.0 64-Bit LTS + MySQL 5.26 64-Bit.

No Errors where found what so ever, no interruptions, no Crashdumps

VM with Windows Server 2008 R2 has 2 GByte RAM assigned.
CPU usage all the time beween 5 ~ 7%, max, Memory usage 13 MBytes

Screenshots:

Thunderdbird - Connected via IMAP+STARTTLS on hMailServer
WIN8K_~2.jpg
hMailServer 5.7.0 x64 LTS while Receiving lots of incomning Bulk Emails Connections
WIN8K_~1.jpg
IMHO Maybe its your HyperV-VM or your Public Internet SMTP-Relayserver which causes the trouble.

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-04-28 00:51

katip wrote:
2019-04-27 22:25
hah, das hat noch gefehlt.
service totally stucks. when i try to stop/restart it, this message comes:
Untitled 1.png
then comes another dump as soon as i click Ok.
The only sane Information about Error 109 (which is a Windows System Error)
is this comment:

// Can occurs when filled buffers are trying to flush to disk, but disk IOs are not fast enough.
// This happens when the disk is slow and event traffic is heavy.
// Eventually, there are no more free (empty) buffers and the event is dropped.
https://referencesource.microsoft.com/# ... references

Sounds like a Hardware I/O Bottleneck to me.

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-28 06:39

Dravion wrote:
2019-04-28 00:51
The only sane Information about Error 109 (which is a Windows System Error)
is this comment:

// Can occurs when filled buffers are trying to flush to disk, but disk IOs are not fast enough.
// This happens when the disk is slow and event traffic is heavy.
// Eventually, there are no more free (empty) buffers and the event is dropped.
https://referencesource.microsoft.com/# ... references

Sounds like a Hardware I/O Bottleneck to me.
i better make a bare metal box and go on with testing there. some time next week maybe.
must fall back now to good old LibreSSL build. 5.7.0 simply doesn't work here.
many thanks for your time.
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-04-29 09:36

I have uploaded a uptodater LibreSSL 2.9.1 Release of LTS 5.7.0, maybe it works in your special Situation.

The other OpenSSL DLL's in the bin Folder needs to be avaiable because other libs like Postgres10 Client Static libs,
linked to hMailServer.exe reference it. But this is only for hMailServer to PostgreSQL Connections, not for Email (SMTP, POP3/IMAP stuff).

https://github.com/Dravion/hMailServer/ ... SL-x64.exe

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-29 11:32

Dravion wrote:
2019-04-29 09:36
I have uploaded a uptodater LibreSSL 2.9.1 Release of LTS 5.7.0, maybe it works in your special Situation.
https://github.com/Dravion/hMailServer/ ... SL-x64.exe
thank you so much. now this works like a charm like it's predecessor.

obviously there is a disagreement between my environment and 5.7.0 OpenSSL implementation.
in case, let me know what you'd like to know about my setup in detail, i'll try to tell you. maybe someone else faces same problems and you know what to do or have a better guess. thanks again.
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-29 16:02

katip wrote:
2019-04-29 11:32
Dravion wrote:
2019-04-29 09:36
I have uploaded a uptodater LibreSSL 2.9.1 Release of LTS 5.7.0, maybe it works in your special Situation.
https://github.com/Dravion/hMailServer/ ... SL-x64.exe
now this works like a charm like it's predecessor.
ehm, not exactly. service stopped 2-3 times and i see this in Win Apps EventLog:

Code: Select all

Faulting application name: hMailServer.exe, version: 5.7.0.0, time stamp: 0x5cc6a2d9
Faulting module name: myodbc8w.dll_unloaded, version: 0.0.0.0, time stamp: 0x5c4e8849
Exception code: 0xc0000005
Fault offset: 0x000007feef3a1100
Faulting process id: 0x980
Faulting application start time: 0x01d4fe8d7d7483f2
Faulting application path: C:\hMailServer\Bin\hMailServer.exe
Faulting module path: myodbc8w.dll
Report Id: 44186520-6a84-11e9-8a01-00155d013201
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-29 16:58

katip wrote:
2019-04-29 16:02
ehm, not exactly. service stopped 2-3 times and i see this in Win Apps EventLog:

Code: Select all

Faulting application name: hMailServer.exe, version: 5.7.0.0, time stamp: 0x5cc6a2d9
Faulting module name: myodbc8w.dll_unloaded, version: 0.0.0.0, time stamp: 0x5c4e8849
Exception code: 0xc0000005
Fault offset: 0x000007feef3a1100
Faulting process id: 0x980
Faulting application start time: 0x01d4fe8d7d7483f2
Faulting application path: C:\hMailServer\Bin\hMailServer.exe
Faulting module path: myodbc8w.dll
Report Id: 44186520-6a84-11e9-8a01-00155d013201
i think MySQL ODBC 8.0 Unicode Driver makes a problem with this build.
i call inserts and queries within eventhandlers.vbs to an external table.
switched it off and error disappeard. previous build was fine with it though. jfyi..
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

palinka
Senior user
Senior user
Posts: 1190
Joined: 2017-09-12 17:57

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by palinka » 2019-04-29 18:44

katip wrote:
2019-04-29 16:58
katip wrote:
2019-04-29 16:02
ehm, not exactly. service stopped 2-3 times and i see this in Win Apps EventLog:

Code: Select all

Faulting application name: hMailServer.exe, version: 5.7.0.0, time stamp: 0x5cc6a2d9
Faulting module name: myodbc8w.dll_unloaded, version: 0.0.0.0, time stamp: 0x5c4e8849
Exception code: 0xc0000005
Fault offset: 0x000007feef3a1100
Faulting process id: 0x980
Faulting application start time: 0x01d4fe8d7d7483f2
Faulting application path: C:\hMailServer\Bin\hMailServer.exe
Faulting module path: myodbc8w.dll
Report Id: 44186520-6a84-11e9-8a01-00155d013201
i think MySQL ODBC 8.0 Unicode Driver makes a problem with this build.
i call inserts and queries within eventhandlers.vbs to an external table.
switched it off and error disappeard. previous build was fine with it though. jfyi..
I just went through this recently. You can't mix 32/64 bit ODBC connectors drivers with vice/verse apps. You probably didn't have an issue before because you were using the 32 bit hmailserver and 32 bit ODBC driver and your issue is coming from mixing 64 bit hmailserver with your old 32 bit ODBC driver. You might need to update your ODBC driver. The 64 bit version contains both 64/32.

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-29 18:46

katip wrote:
2019-04-29 16:58
i think MySQL ODBC 8.0 Unicode Driver makes a problem with this build.
confirmed. MySQL ODBC 5.3 works well with LTS 5.7.0 LibreSSL build & my VBscripts. that's good news.
MySQL ODBC 8.0 causes HMS service die silently likely when script triggers commands to external table.
jfyi..
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-29 18:51

palinka wrote:
2019-04-29 18:44
I just went through this recently. You can't mix 32/64 bit ODBC connectors drivers with vice/verse apps. You probably didn't have an issue before because you were using the 32 bit hmailserver and 32 bit ODBC driver and your issue is coming from mixing 64 bit hmailserver with your old 32 bit ODBC driver. You might need to update your ODBC driver. The 64 bit version contains both 64/32.
no, of course changed all to 64 bit, HMS + MySQL + Connector.
previous 64 bit HMS LibreSSL build was working fine since October last year. see my last post pls.
now all works fine again, but with ODBC 5.3 this time.

so, just to avoid confusion:
5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update doesn't work at all here
5.6.8-B2431-LibreSSL-x64 + MySQL + ODBC 8.0 worked perfectly all the time
LTS-5.7.0-B2428-LibreSSL-x64 (special build, thanks again) + MySQL + ODBC 8.0 dies
LTS-5.7.0-B2428-LibreSSL-x64 + MySQL + ODBC 5.3 works fine now

we're talking about all 64 bit.
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

palinka
Senior user
Senior user
Posts: 1190
Joined: 2017-09-12 17:57

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by palinka » 2019-04-29 19:54

katip wrote:
2019-04-29 18:51
palinka wrote:
2019-04-29 18:44
I just went through this recently. You can't mix 32/64 bit ODBC connectors drivers with vice/verse apps. You probably didn't have an issue before because you were using the 32 bit hmailserver and 32 bit ODBC driver and your issue is coming from mixing 64 bit hmailserver with your old 32 bit ODBC driver. You might need to update your ODBC driver. The 64 bit version contains both 64/32.
no, of course changed all to 64 bit, HMS + MySQL + Connector.
previous 64 bit HMS LibreSSL build was working fine since October last year. see my last post pls.
now all works fine again, but with ODBC 5.3 this time.

so, just to avoid confusion:
5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update doesn't work at all here
5.6.8-B2431-LibreSSL-x64 + MySQL + ODBC 8.0 worked perfectly all the time
LTS-5.7.0-B2428-LibreSSL-x64 (special build, thanks again) + MySQL + ODBC 8.0 dies
LTS-5.7.0-B2428-LibreSSL-x64 + MySQL + ODBC 5.3 works fine now

we're talking about all 64 bit.
ah. I didn't read the whole thing. :oops: Thanks for the update.

User avatar
katip
Senior user
Senior user
Posts: 690
Joined: 2006-12-22 07:58
Location: Istanbul

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by katip » 2019-04-29 20:20

case closed :D

5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r now works fine too with ODBC 5.3.
it comes out that ODBC 8.0 was the culprit. but didn't leave any trace. service just stucked.
LTS-5.7.0-B2428-LibreSSL-x64 with ODBC 8.0, dying service provided the clue in Event Viewer.

so, all is fine with all builds + ODBC 5.3.
it was rather about my setup specific issue with that external table manipulation from script.

but how particularly 5.6.8-B2431-LibreSSL-x64 + ODBC 8.0 worked fine all the time is a question Dravion might be interested in.
Katip
--
HMS 5.7.0-B2428-LTS-64-bit, MySQL 5.7.24, SA 3.4.2, ClamAV 0.101.2 + SaneS

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-04-29 20:49

That sounds good! :D
Iam glad it works now and we understand what was the Proböem!

User avatar
nitro
Normal user
Normal user
Posts: 31
Joined: 2018-11-08 16:31
Location: Spain

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by nitro » 2019-05-14 16:25

Good afternoon Dravion, I'm thinking about updating the version of hmailserver 5.6.7 B2425 .16 to your new compilation hMailServer-LTS-5.7.0-B2428-x64.
I am currently using a MSSQL 2014 database and I would like to obtain the same results but with the advantage of using a 64bit compilation together with LibreSSL and the properties of Sub OnHELO (oClient).
Does your compilation include Sub OnHELO (oClient)?
Once your TalkCircle-RootCA-Cert.crt is installed, can I install my version of Hmailserver, as if it were any other update?

Thanks for your work and your help to keep hmailserver and your community alive.
Production 5.6.8-B2437.20_OpenSSL_1.0.2s W.Server 2016 Datace [2x Intel Xeon E5-2660 8GB RAM]
Staging 5.7-B2490 W.Server 2008 R2 Stand [Intel Pentium 4 4GB RAM]

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-05-14 17:00

No, it doesnt inzegrate Subonhelo!
Thats Rdvh Custom Project and 32-Bit only while LTS Releases are allways 64-Bit only.

PS: Read the LTS MSSQL requirements carefully,
you need to install MSODBC v18 x64 Driver before
installing LTS because it enforces Transportlayer Security to MS-SQL Server 2008-> upto 2017
with TLSv1.2. If you try it without MSODBC 18
the LTS Setup will fail.

User avatar
nitro
Normal user
Normal user
Posts: 31
Joined: 2018-11-08 16:31
Location: Spain

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by nitro » 2019-05-16 13:35

Hello, I just updated a small server of hmailserver 5.6.7 B2425 .16 with a few accounts to LTS-5.7.0-B2428-LibreSSL-x64, I have followed your recommendations and I have not had any problem. It's been running normally all morning. For me it is great news since supposedly I should not have any problem in updating another server with more accounts and workload.

I only have to sacrifice Sub OnHELO (oClient), do you plan to implement it in future revisions? Thanks to it I have obtained very good results with very little effort.

Thanks again for your work. :D
Production 5.6.8-B2437.20_OpenSSL_1.0.2s W.Server 2016 Datace [2x Intel Xeon E5-2660 8GB RAM]
Staging 5.7-B2490 W.Server 2008 R2 Stand [Intel Pentium 4 4GB RAM]

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by Dravion » 2019-05-16 15:19

I dont know if this is a good idea regarding stability.
As far as i know Rdvh doesnt rebase its changes upto the latest official 5.7.0 Source Code base.

As far as i know he doesnt publisch his modified Source code onto his Github Account on a regular basis, so that would be a shostopper to.

User avatar
mattg
Moderator
Moderator
Posts: 20223
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by mattg » 2019-05-16 16:41

Sub OnHelo

https://github.com/hmailserver/hmailserver/pull/150
https://github.com/hmailserver/hmailserver/pull/151
https://github.com/hmailserver/hmailserver/pull/152

Been pull requested to 5.7 for a couple of years
SorenR's code, I think that RvdH just used the above pull requests
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

User avatar
RvdH
Senior user
Senior user
Posts: 806
Joined: 2008-06-27 14:42
Location: Netherlands

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by RvdH » 2019-05-17 08:53

@mattg
That pull request seems incomplete.... where have all the "Return.Value" entries gone?
As per https://www.hmailserver.com/forum/viewt ... 68#p188768 it is known this function can use "Return.Value"
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
mattg
Moderator
Moderator
Posts: 20223
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by mattg » 2019-05-18 03:10

This is where I originally got the code
https://www.hmailserver.com/forum/viewt ... 38#p183209

PLEASE update the code to what is in your builds, or post your own pull request to GitHub

I use this feature a lot.
Actually just checking, no I don't.
I use it only to AutoBan some specific IPs who offer HELO responses that are always ONLY scammers/spammers - just over one IP per day on average over the last year
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

User avatar
SorenR
Senior user
Senior user
Posts: 3210
Joined: 2006-08-21 15:38
Location: Denmark

Re: hMailServer 5.7.0 64-Bit (LTS) - April Release with OpenSSL 1.0.2r update

Post by SorenR » 2019-05-18 08:05

I believe this is the version in Ruud's code. It is the version I use in my 5.4.2 code.

viewtopic.php?p=188753#p188753
SørenR.

“With age comes wisdom, but sometimes age comes alone.”
- Oscar Wilde

Post Reply