Am 07.05.2012 12:52, schrieb Wietse Venema: > Fiona Hines: >> How do I get TLS SNI support in Postfix?? I can't find any >> documentation on the subject except a few discussions that are >> several years old.? I've got TLS working with one domain but I >> want to expand it to an unknown number of domains and I don't care >> if the mail client lacks support for SNI. > > What mail clients use SNI **for SMTP**?
I just verified that Thunderbird 12.0 on Ubuntu 12.04 does send SNI, mutt on the same box doesn't. If you want to check, best way to do it is to run wireshark/tshark on your MTA, dump packets verbosely and grep for the server_name extension. # tshark -V -i eth1 -R "ssl.handshake.type == 1" port 587 or port 25 | grep -e '^Internet Protocol' -e 'Extension: server_name' It is in use, but not very broadly. I don't have that many users on this postfix instance, maybe someone with some more traffic can run a statistic. Bernhard
