On Mon, Nov 19, 2012 at 03:48:14PM -0500, thorso...@lavabit.com wrote: > I applied the suggested changes and decided to test the server. > > "openssl s_client -tls1 -connect mail.example.com:25" returned > "SSL3_GET_RECORD:wrong version number". What is the problem?
SMTP servers negotiate TLS over SMTP via STARTTLS, you're trying
to start the SSL/TLS handshake without the prior SMTP handshake.
You must:
$ openssl s_client -starttls smtp -connect mail.example.com:25
--
Viktor.
