On 19.08.2015, at 21:40, Viktor Dukhovni <postfix-us...@dukhovni.org> wrote:
> I've figured out what's going on. LibreSSL 2.2.2 appears to have > disabled support for the SSLv2-compatible client HELLO. Servers > that have not disabled SSLv2 are unable to complete an SSLv2-compatible > TLS handshake with LibreSSL 2.2.2. Connections that use an SSLv2 > hello fail. Also clients that use just SSLv3 (no extensions, ...) > fail. If I do understand that correctly, it has been a good advice to revert back to OpenSSL running OS != OpenBSD. And, if I am not mistaken, there is no way to tell postfix to work around that disabled support for HELLO. Correct? If you are interested in tcpdumps of connections from russian-caravan.cloud9.net, please let me know. I do have one dump at hand, already. Thanks for your great help, Michael
