Re: postfix issue with ecc certificates

2018-08-03 Thread Viktor Dukhovni
> On Aug 3, 2018, at 6:09 PM, David Mehler wrote: > > smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1 !TLSv1.1 TLSv1.2 > smtpd_tls_protocols = !SSLv2, !SSLv3, !TLSv1 !TLSv1.1 TLSv1.2 This does not leave too many working options... :-) -- Viktor.

Re: postfix issue with ecc certificates

2018-08-03 Thread Wietse Venema
David Mehler: > Aug 3 17:22:27 hostname postfix/submission/smtpd[65716]: warning: TLS > library problem: error:1408A0C1:SSL routines:ssl3_get_client_hello:no > shared cipher:s3_srvr.c:1427: ... > smtp_tls_mandatory_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, > MD5, PSK, aECDH, EDH-DSS-DES-CB

postfix issue with ecc certificates

2018-08-03 Thread David Mehler
Hello, I'm using Postfix 3.3. I am atempting to send mail from a remote android phone running AquaMail Pro, which does support ECC certificates of secp-256. So I got an ecc cert pair from letsencrypt and installed it. Atempting to send an email gives me a handshake error on the android client and