Hi Viktor, On Tue, Nov 26, 2013 at 6:05 PM, Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: > On Tue, Nov 26, 2013 at 05:53:05PM -0500, Wietse Venema wrote: > >> Buried under useless verbose logging is a clear warning: >> >> > warning: TLS library problem: 16575:error:1408F10B:SSL >> > routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:337: smtp_get: >> >> This means that the TLS library had a problem. > > Plus the server is an Microsoft Exchange server, and the problem > happens on the first command after the post STARTLS EHLO. > >> > I've also included the successful telnet test: >> >> telnet is not valid, since you are using TLS. >> >> To debug SMTP over TLS, use "openssl s_client". > > No need. This is the problem with Exchange on Windows 2003, and > the broken DES-CBC3-SHA ciphersuite. Work-around in the list > archives.
I believe I've found your post in the archives from just a few weeks ago that describes this a bit further, but it doesn't describe where you got the info from, so that I may understand this further. Do you know where I can find more info about this? Perhaps there's a MS tech bulletin or something that I can forward to the ISP? Thanks, Alex
