Hi, on ubuntu lucid
openssl is 0.9x

with self compiled postfix 2.11

and smtpd tls log level 1

a warning apear like

 warning: TLS library problem: error:1409442E:SSL
routines:SSL3_READ_BYTES:tlsv1 alert protocol version:s3_pkt.c:1099:SSL
alert number 70:

with i.e test

openssl s_client -connect mail01.example.com:25 -starttls smtp -tls1_2
-CApath /etc/ssl/

this can not be avoided

with i.e

smtpd_tls_protocols = !SSLv2, !SSLv3, !TLSv1_1, !TLSv1_2

cause tls will get disabled

warning: Invalid TLS protocol list "TLSv1, !SSLv2, !SSLv3, !TLSv1_1,
!TLSv1_2": disabling TLS support

speculate TLSv1_1 TLSv1_2 are not known cause of openssl vers 0.9.x

am i right ?, Best practice ignore warning ?

Best Regards
MfG Robert Schetterer

-- 
[*] sys4 AG

http://sys4.de, +49 (89) 30 90 46 64
Franziskanerstraße 15, 81669 München

Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein

Reply via email to