Hi Andreas, > Am 14.08.2019 um 10:01 schrieb A. Schulze <s...@andreasschulze.de>: > > > Christian Rößner: > > Hello Christian, > >> By changing *_CAfile parameters to *_CApath, everything started working >> again. > > nothing specific to your OpenSSL version but: do you run postfix chroot? > from http://www.postfix.org/postconf.5.html#smtpd_tls_CApath:
The system is not running chroot. > > "To use smtpd_tls_CApath in chroot mode, this directory (or a copy) must be > inside the chroot jail." > > Andreas > > OT: >> tls_ssl_options = NO_COMPRESSION > > as you're using latest postfix+openssl, you may want to add "no_renegotiation" Thanks, I will add this :-) Christian -- Rößner-Network-Solutions Karl-Bröger-Str. 10, 36304 Alsfeld Fax: +49 6631 78823409, Mobil: +49 171 9905345 USt-IdNr.: DE225643613, https://roessner.website PGP fingerprint: 658D 1342 B762 F484 2DDF 1E88 38A5 4346 D727 94E5