On 2015-05-20 11:32, King Cao wrote:
Dears,
Hi,
Currently my postfix need to delivery mails to exchange 2003 and encounter handshake failure issue when setting up the TLS connection. posttls-finger failed but openssl succeeded. The remote exchange only support cipher: "RC4-SHA". The "RC4-SHA" is 71st place on the cipher list. And posttls-finger just set the cipher list to openssl, not sure why posttls-finger failed but openssl succeeded. Can anyone help on it?
this was on the mailing list a few weeks ago, see http://marc.info/?l=postfix-users&m=143035551026621&w=1
PS: Testing Commands: ./posttls-finger -lmay -c -lmay -o 'tls_medium_cipherlist = ALL:!EXPORT:!LOW:+RC4:@STRENGTH' -Ldebug "[168.xxx.xxx.xxx]" openssl s_client -starttls smtp -connect 168.xxx.xxx.xxx:25 -cipher 'ALL:!EXPORT:!LOW:+RC4:@STRENGTH' Regards, King
Regards - christian