Based on input from Victor I'll put out a 2.10 development release that makes the minimum changes to support the new OpenSSL protocols. This may then be back-ported to earlier Postfix releases if needed.
Meanwhile, Victor will start work on future-proofing Postfix, such
that it will be prepared for future OpenSSL releases that introduce
new features that Postfix doesn't know about. That code will most
likely be fielded as a non-production release, followed by regular
development releases.
Wietse
