postfix--- via Postfix-users:
> My distro package manager gives me postfix 3.5.25 with openssl 3.2.2 which 
> causes SSL version mismatch warnings I was previously told I could ignore.
> 
> I got a failed transaction:
> 
>    Jan 21 09:15:21 host postfix/smtpd[79286]: warning: run-time library vs. 
> compile-time header version mismatch: OpenSSL 3.2.0 may not be compatible 
> with OpenSSL 3.0.0
>    Jan 21 09:15:22 host postfix/smtpd[79286]: connect from 
> sub.example.com[xxx.xxx.xxx.xxx]
>    Jan 21 09:15:22 host postfix/smtpd[79286]: SSL_accept error from 
> sub.example.com[xxx.xxx.xxx.xxx]: -1
>    Jan 21 09:15:22 host postfix/smtpd[79286]: warning: TLS library problem: 
> error:0A0000C1:SSL routines::no shared cipher:ssl/statem/statem_srvr.c:2327:
>    Jan 21 09:15:22 host postfix/smtpd[79286]: lost connection after STARTTLS 
> from sub.example.com[xxx.xxx.xxx.xxx]
>    Jan 21 09:15:22 host postfix/smtpd[79286]: disconnect from 
> sub.example.com[xxx.xxx.xxx.xxx] ehlo=1 starttls=0/1 commands=1/2
> 
> and I'm wondering if this was my fault or their fault, and should I roll back 
> my openssl version.

You may want to comment out protocol or cipher tweaks' these can
reduce interoperability:

postconf -n | grep tls

        Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to