[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Viktor Dukhovni via Postfix-users
On Sun, Aug 06, 2023 at 12:14:10AM -0400, Charles Sprickman wrote: > > If not for your sake, then perhaps for future readers, it would be great > > if you would confirm or deny what type of certificate is configured on > > the Postfix SMTP server end? > > Oops, missed this earlier. Would have

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Charles Sprickman via Postfix-users
> On Aug 5, 2023, at 3:38 PM, Viktor Dukhovni via Postfix-users > wrote: > > On Sat, Aug 05, 2023 at 03:27:01PM -0400, Charles Sprickman via Postfix-users > wrote: > >>> Nope, ever since SSL 3.0 the client proposes and the server chooses. >>> The issue is very likely that the server's certi

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Shawn Heisey via Postfix-users
On 8/5/23 13:38, Viktor Drukhovni via Postfix-users wrote: If not for your sake, then perhaps for future readers, it would be great if you would confirm or deny what type of certificate is configured on the Postfix SMTP server end? If you switch to RSA, it should work with the iDRAC, the cipher

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Viktor Dukhovni via Postfix-users
On Sat, Aug 05, 2023 at 03:27:01PM -0400, Charles Sprickman via Postfix-users wrote: > > Nope, ever since SSL 3.0 the client proposes and the server chooses. > > The issue is very likely that the server's certificate is ECDSA or > > Ed25519, and so not supported by the client. > > > >https:/

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Charles Sprickman via Postfix-users
On Aug 5, 2023, at 3:01 PM, Viktor Dukhovni via Postfix-users wrote: > > On Sat, Aug 05, 2023 at 11:23:06AM -0700, Dan Mahoney via Postfix-users wrote: > >> Under the hood, idracs do use openSSL, and it’s not unreasonable to >> assume that both the SMTP client and the web server use the same >>

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Viktor Dukhovni via Postfix-users
On Sat, Aug 05, 2023 at 11:23:06AM -0700, Dan Mahoney via Postfix-users wrote: > Under the hood, idracs do use openSSL, and it’s not unreasonable to > assume that both the SMTP client and the web server use the same > linked version. You could start by seeing which ciphers the idrac 7 > web UI su

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Dan Mahoney via Postfix-users
> On Aug 5, 2023, at 6:46 AM, Matus UHLAR - fantomas via Postfix-users > wrote: > > On 05.08.23 00:35, Charles Sprickman via Postfix-users wrote: >> Just following up to myself here, but this Dell POS just bails if it can't >> do TLS, lol: >> >> Aug 5 00:30:52 mail postfix/smtpd[76663]: < u

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Matus UHLAR - fantomas via Postfix-users
On 05.08.23 00:35, Charles Sprickman via Postfix-users wrote: Just following up to myself here, but this Dell POS just bails if it can't do TLS, lol: Aug 5 00:30:52 mail postfix/smtpd[76663]: < unknown[10.3.2.5]: EHLO ANON Aug 5 00:30:52 mail postfix/smtpd[76663]: discarding EHLO keywords: ST