简介
本文描述如何使用TLSVERIFY排除故障TLS交付问题。
关于处理在思科电子邮件安全工具(ESA)的邮件，您可以发现TLS是不传送或返回错误或警报。
从在设备的CLI，使用tlsverify测试从您的设备的TLS通信到外部域。
mail3.example.com> tlsverify
Enter the TLS domain to verify against:
[]> example.com
Enter the destination host to connect to. Append the port
(example.com:26) if you are not connecting on port 25:
[example.com]> mxe.example.com:25
Connecting to 1.1.1.1 on port 25.
Connected to 1.1.1.1 from interface 10.10.10.10.
Checking TLS connection.
TLS connection established: protocol TLSv1, cipher RC4-SHA.
Verifying peer certificate.
Verifying certificate common name mxe.example.com.
TLS certificate match mxe.example.com
TLS certificate verified.
TLS connection to 1.1.1.1 succeeded.
TLS successfully connected to mxe.example.com.
TLS verification completed.
上述输出从tlsverify命令显示从此设备的TLS验证到与IP地址1.1.1.1的目的地。
相关信息
反馈