On Thu, 3 Apr 2025 23:33:28 +1100 Viktor Dukhovni via Postfix-users <postfix-users@postfix.org> wrote:
> On Thu, Apr 03, 2025 at 12:40:02PM +0200, Paul Neuwirth via > Postfix-users wrote: > > > that makes totally sense. > > > > I am struggling with that scanner: > > https://siwecos.de/en/app > > > > it says: > > > > for > > > > SMTPS Scanner [SMTPS_TLS] > > SMTP MSA(STARTTLS) Scanner [SMTP_MSA_TLS] > > SMTP(STARTTLS) Scanner [SMTP_TLS] > > "TLS not supported" > > Congratulations, you've found another useless scanner on the Internet, > why do you care??? > > > for mail.swabian.net > > All you need to know is that your TLS support is just fine: > > $ posttls-finger -cF /etc/ssl/cert.pem -lsecure -Lsummary > "[mail.swabian.net]:587" posttls-finger: Verified TLS connection > established to mail.swabian.net[80.152.201.148]:587: TLSv1.3 with > cipher TLS_AES_256_GCM_SHA384 (256/256 bits) > key-exchange x25519 > server-signature RSA-PSS (2048 bits) > server-digest SHA256 > > $ posttls-finger -cwF /etc/ssl/cert.pem -lsecure -Lsummary > "[mail.swabian.net]:465" posttls-finger: Verified TLS connection > established to mail.swabian.net[80.152.201.148]:465: TLSv1.3 with > cipher TLS_AES_256_GCM_SHA384 (256/256 bits) > key-exchange x25519 > server-signature RSA-PSS (2048 bits) > server-digest SHA256 > > > I have no idea, what version or cipher they test. that's why I tried > > with openssl s_client and I cannot find any issues. :-( > > > > contacted their support, but doubt I'll get a reply. > > Just ignore them. > thank you very much for the reassurance :-) _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
