Hi everyone! Yesterday I enabled TLS on my Postfix server (v.3.4.13).
When I did, no one with a Google or Yahoo hosted address could send us mail
(possibly others too)
When I checked the Postfix log, I saw a bunch of this...
Jun 8 17:16:52 g1 postfix/smtpd[2153672]: connect from
mail-pl1-f180.google.com[209.85.214.180]
Jun 8 17:16:52 g1 postfix/smtpd[2153672]: SSL_accept error from
mail-pl1-f180.google.com[209.85.214.180]: -1
Jun 8 17:16:52 g1 postfix/smtpd[2153672]: warning: TLS library problem:
error:141FC044:SSL routines:tls_setup_handshake:internal
error:../ssl/statem/statem_lib.c:109:
Jun 8 17:16:52 g1 postfix/smtpd[2153672]: lost connection after STARTTLS
from mail-pl1-f180.google.com[209.85.214.180]
Jun 8 17:16:52 g1 postfix/smtpd[2153672]: disconnect from
mail-pl1-f180.google.com[209.85.214.180] ehlo=1 starttls=0/1 commands=1/2
I Googled these errors, but I have not been able to find an answer that
works.
Here are my TLS parameters...
# TLS parameters
smtpd_tls_cert_file=/etc/letsencrypt/live/
g1.server_host_name.net/fullchain.pem
smtpd_tls_key_file=/etc/letsencrypt/live/g1.server_host_name.net/privkey.pem
smtpd_use_tls=yes
smtp_tls_CApath=/etc/ssl/certs
smtp_tls_security_level=encrypt
smtpd_tls_protocols = !SSLv2, !SSLv3 !TLSv1 !TLSv1.1 !TLSv1.2 !TLSv1.3
smtpd_tls_loglevel = 1
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
Any help would be very much appreciated.
Thanks!
