Hi, Thanks, that has done it.
Thanks. Dave. On 8/4/18, Viktor Dukhovni <postfix-us...@dukhovni.org> wrote: > > >> On Aug 4, 2018, at 11:15 AM, David Mehler <dave.meh...@gmail.com> wrote: >> >> Sorry, the parameter is smtpd_tls_eecdh_grade it was set to ultra I >> set it to strong. I don't know if that's what did it but clients can >> now send. > > With recent Postfix releases, and OpenSSL >= 1.0.2, the best setting > for this parameter is "auto", which negotiates a mutually agreeable > group based on the client's list of supported curves. > > http://www.postfix.org/postconf.5.html#smtpd_tls_eecdh_grade > > Therefore (as with many other Postfix parameters) it is best to simply > NOT CHANGE the default value of this parameter. > > $ postconf -d mail_version smtpd_tls_eecdh_grade > mail_version = 3.3.1 > smtpd_tls_eecdh_grade = auto > >> If I'm getting what I'm reading ultra refers to p-384 bit ecc curves, >> while strong is p-256, that's what I've got. > > Let Postfix do the work for you, you don't have to lock down all the > settings. > > -- > Viktor. > >
