[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Viktor Dukhovni via Postfix-users
On Sun, Aug 06, 2023 at 12:14:10AM -0400, Charles Sprickman wrote: > > If not for your sake, then perhaps for future readers, it would be great > > if you would confirm or deny what type of certificate is configured on > > the Postfix SMTP server end? > > Oops, missed this earlier. Would have

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Charles Sprickman via Postfix-users
> On Aug 5, 2023, at 3:38 PM, Viktor Dukhovni via Postfix-users > wrote: > > On Sat, Aug 05, 2023 at 03:27:01PM -0400, Charles Sprickman via Postfix-users > wrote: > >>> Nope, ever since SSL 3.0 the client proposes and the server chooses. >>> The issue is very likely that the server's certi

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Shawn Heisey via Postfix-users
On 8/5/23 13:38, Viktor Drukhovni via Postfix-users wrote: If not for your sake, then perhaps for future readers, it would be great if you would confirm or deny what type of certificate is configured on the Postfix SMTP server end? If you switch to RSA, it should work with the iDRAC, the cipher

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Viktor Dukhovni via Postfix-users
On Sat, Aug 05, 2023 at 03:27:01PM -0400, Charles Sprickman via Postfix-users wrote: > > Nope, ever since SSL 3.0 the client proposes and the server chooses. > > The issue is very likely that the server's certificate is ECDSA or > > Ed25519, and so not supported by the client. > > > >https:/

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Charles Sprickman via Postfix-users
On Aug 5, 2023, at 3:01 PM, Viktor Dukhovni via Postfix-users wrote: > > On Sat, Aug 05, 2023 at 11:23:06AM -0700, Dan Mahoney via Postfix-users wrote: > >> Under the hood, idracs do use openSSL, and it’s not unreasonable to >> assume that both the SMTP client and the web server use the same >>

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Viktor Dukhovni via Postfix-users
On Sat, Aug 05, 2023 at 11:23:06AM -0700, Dan Mahoney via Postfix-users wrote: > Under the hood, idracs do use openSSL, and it’s not unreasonable to > assume that both the SMTP client and the web server use the same > linked version. You could start by seeing which ciphers the idrac 7 > web UI su

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Dan Mahoney via Postfix-users
> On Aug 5, 2023, at 6:46 AM, Matus UHLAR - fantomas via Postfix-users > wrote: > > On 05.08.23 00:35, Charles Sprickman via Postfix-users wrote: >> Just following up to myself here, but this Dell POS just bails if it can't >> do TLS, lol: >> >> Aug 5 00:30:52 mail postfix/smtpd[76663]: < u

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-05 Thread Matus UHLAR - fantomas via Postfix-users
On 05.08.23 00:35, Charles Sprickman via Postfix-users wrote: Just following up to myself here, but this Dell POS just bails if it can't do TLS, lol: Aug 5 00:30:52 mail postfix/smtpd[76663]: < unknown[10.3.2.5]: EHLO ANON Aug 5 00:30:52 mail postfix/smtpd[76663]: discarding EHLO keywords: ST

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-04 Thread Charles Sprickman via Postfix-users
> On Aug 4, 2023, at 1:23 PM, Charles Sprickman via Postfix-users > wrote: > > > >> On Aug 3, 2023, at 5:46 AM, Jaroslaw Rafa via Postfix-users >> wrote: >> >> Dnia 2.08.2023 o godz. 23:28:09 Charles Sprickman via Postfix-users pisze: The iDRAC is trying to use STARTTLS, so encrypt

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-04 Thread Charles Sprickman via Postfix-users
> On Aug 3, 2023, at 5:46 AM, Jaroslaw Rafa via Postfix-users > wrote: > > Dnia 2.08.2023 o godz. 23:28:09 Charles Sprickman via Postfix-users pisze: >>> The iDRAC is trying to use STARTTLS, so encrypted SMTP transport appears >>> to be supported. As noted by others, it may be simplest to n

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-03 Thread Jaroslaw Rafa via Postfix-users
Dnia 2.08.2023 o godz. 23:28:09 Charles Sprickman via Postfix-users pisze: > > The iDRAC is trying to use STARTTLS, so encrypted SMTP transport appears > > to be supported. As noted by others, it may be simplest to not offer > > it STARTTLS (smtpd_discard_ehlo_keyword_address_maps). > > I'll use

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-02 Thread Viktor Dukhovni via Postfix-users
On Wed, Aug 02, 2023 at 11:28:09PM -0400, Charles Sprickman via Postfix-users wrote: > [root@mail /usr/local/etc/postfix]# postconf -n |grep tls > smtp_tls_note_starttls_offer = yes > smtp_use_tls = yes > smtpd_tls_auth_only = no > smtpd_tls_cert_file = /usr/local/etc/dehydrated/certs/ANON/fullch

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-02 Thread Charles Sprickman via Postfix-users
Hi Viktor and everyone else - replying with more information inline... > On Aug 2, 2023, at 9:33 AM, Viktor Dukhovni via Postfix-users > wrote: > > On Wed, Aug 02, 2023 at 01:26:43AM -0400, Charles Sprickman via Postfix-users > wrote: > >> [root@mail /usr/local/etc/postfix]# postconf -n |grep

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-02 Thread Viktor Dukhovni via Postfix-users
On Wed, Aug 02, 2023 at 01:26:43AM -0400, Charles Sprickman via Postfix-users wrote: > [root@mail /usr/local/etc/postfix]# postconf -n |grep smtpd_tls > smtpd_tls_auth_only = no > smtpd_tls_cert_file = /usr/local/etc/dehydrated/certs/foo/fullchain.pem > smtpd_tls_key_file = /usr/local/etc/dehydra

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-02 Thread Jaroslaw Rafa via Postfix-users
Dnia 2.08.2023 o godz. 01:26:43 Charles Sprickman via Postfix-users pisze: > > It's an "iDRAC7", which is just a little management card. I want it to be > able to send some email alerts, but I keep getting warnings about a cipher > mismatch. With some debugging I think there's some hints here, bu

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-02 Thread Matus UHLAR - fantomas via Postfix-users
On 02.08.23 01:26, Charles Sprickman via Postfix-users wrote: I'm having a heck of a time figuring out how to see just what this Dell is offering when speaking to Postfix... It's an "iDRAC7", which is just a little management card. I want it to be able to send some email alerts, but I keep ge

[pfx] Re: Accepting mail from old Dell iDRAC

2023-08-01 Thread Phil Biggs via Postfix-users
Wednesday, August 2, 2023, 3:26:43 PM, Charles Sprickman via Postfix-users wrote: > Hi all, > I'm having a heck of a time figuring out how to see just what this Dell is > offering when speaking to Postfix... > It's an "iDRAC7", which is just a little management card. > I want it to be able t