On Thu, 3 Apr 2025 11:54:42 +0200 Matus UHLAR - fantomas via Postfix-users <postfix-users@postfix.org> wrote:
> >> On Thu, Apr 03, 2025 at 11:16:15AM +0200, Paul Neuwirth via > >> Postfix-users wrote: > >> > after an upgrade of postfix I am checking my config. > >> > > >> > I am in the impression, this should work: > >> > # openssl s_client -connect mail.swabian.net:465 -starttls smtp > >> > -tls1_3 CONNECTED(00000003) > >> > Didn't find STARTTLS in server response, trying anyway... > >> > write:errno=32 > > >On Thu, 3 Apr 2025 11:22:24 +0200 > >"Herbert J. Skuhra via Postfix-users" <postfix-users@postfix.org> > >wrote: > >> Either remove '-starttls smtp' or use port 587. > > On 03.04.25 11:29, Paul Neuwirth via Postfix-users wrote: > >ok, that means I was wrong with the impression, that this should work > >on port 465. > > "-starttls smtp" should work on ports 25/587 where plaintext is > default. (587 should require starttle before it allows anything). > > on port 465, TLS should be the default and starttls should not make > sense. > > that makes totally sense. I am struggling with that scanner: https://siwecos.de/en/app it says: for SMTPS Scanner [SMTPS_TLS] SMTP MSA(STARTTLS) Scanner [SMTP_MSA_TLS] SMTP(STARTTLS) Scanner [SMTP_TLS] "TLS not supported" for mail.swabian.net I have no idea, what version or cipher they test. that's why I tried with openssl s_client and I cannot find any issues. :-( contacted their support, but doubt I'll get a reply. Regards, Paul _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
