Viktor Dukhovni:
Therefore, if a system is upgraded to OpenSSL 1.1.1, Postfix will use 1.1.1 without a rebuild.
but the mail log get flooded with ugly warnings: https://github.com/vdukhovni/postfix/blob/master/postfix/src/tls/tls_misc.c#L971I do run postfix-3.3.1 + openssl-1.1.1-pre* since some months without any negative impact.
But that's only a low volume, non-imortant infrastructure (my MX)... Andreas