postfix--- via Postfix-users: > My distro package manager gives me postfix 3.5.25 with openssl 3.2.2 which > causes SSL version mismatch warnings I was previously told I could ignore. > > I got a failed transaction: > > Jan 21 09:15:21 host postfix/smtpd[79286]: warning: run-time library vs. > compile-time header version mismatch: OpenSSL 3.2.0 may not be compatible > with OpenSSL 3.0.0 > Jan 21 09:15:22 host postfix/smtpd[79286]: connect from > sub.example.com[xxx.xxx.xxx.xxx] > Jan 21 09:15:22 host postfix/smtpd[79286]: SSL_accept error from > sub.example.com[xxx.xxx.xxx.xxx]: -1 > Jan 21 09:15:22 host postfix/smtpd[79286]: warning: TLS library problem: > error:0A0000C1:SSL routines::no shared cipher:ssl/statem/statem_srvr.c:2327: > Jan 21 09:15:22 host postfix/smtpd[79286]: lost connection after STARTTLS > from sub.example.com[xxx.xxx.xxx.xxx] > Jan 21 09:15:22 host postfix/smtpd[79286]: disconnect from > sub.example.com[xxx.xxx.xxx.xxx] ehlo=1 starttls=0/1 commands=1/2 > > and I'm wondering if this was my fault or their fault, and should I roll back > my openssl version.
You may want to comment out protocol or cipher tweaks' these can reduce interoperability: postconf -n | grep tls Wietse _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org