;
> The cipher grade in Postfix sets a "floor" on the ciphers used, that
> is only medium or better. Nobody is "making them medium":
>
> http://www.postfix.org/postconf.5.html#smtp_tls_ciphers
>
> --
> Viktor.
Appreciate your input, Viktor
> On Mar 30, 2017, at 12:03 AM, Den1 wrote:
>
>> smtp_tls_ciphers = medium
>> smtp_tls_exclude_ciphers =
>> MD5,SRP,PSK,aDSS,kECDH,kDH,SEED,IDEA,RC2,RC5,RC4
>
> Why would you exclude these ciphers
Because:
* MD5 is weak, obsolete and unnecessary
* SRP and PSK require special code to use,
1664.n5.nabble.com/Postfix-cannot-start-tls-handshake-failure-tp89684p89748.html
Sent from the Postfix Users mailing list archive at Nabble.com.
On Wed, Mar 29, 2017 at 05:03:51AM -0700, Den1 wrote:
> I was wondering is it actually advisable to use tls on smtp? When I tried it
> out with my self-signed certificates just to see if it's of any convenience
> to implement this feature I received the following response:
>
> TLS required, but w
On Wed, Mar 29, 2017 at 04:14:35AM -0700, oakley wrote:
> *openssl s_client -connect (mydomain.com):443 -servername (mydomain.com)*
>
Why on earth are you wasting our time showing results of connections
to an HTTPS service. In every message you post, show the current
*Postfix* configuration, *l
t the same for smtp as it works for me with 'may', but
it's quite different with encrypt or secure.
--
View this message in context:
http://postfix.1071664.n5.nabble.com/Postfix-cannot-start-tls-handshake-failure-tp89684p89733.html
Sent from the Postfix Users mailing list archive at Nabble.com.
Louis
> -Oorspronkelijk bericht-
> Van: webmas...@lshipping.info [mailto:owner-postfix-us...@postfix.org]
> Namens Den1
> Verzonden: woensdag 29 maart 2017 14:50
> Aan: postfix-users@postfix.org
> Onderwerp: RE: Postfix cannot start tls: handshake failure
>
> Hi Louis,
>
> Thank
Hi Louis,
Thank you for your input, I appreciate. I have smtpd running OK with all the
key_file, cert_file and so on. I was asking about smtp. These two are
different :-)
--
View this message in context:
http://postfix.1071664.n5.nabble.com/Postfix-cannot-start-tls-handshake-failure
mens Den1
> Verzonden: woensdag 29 maart 2017 14:04
> Aan: postfix-users@postfix.org
> Onderwerp: Re: Postfix cannot start tls: handshake failure
>
> I was wondering is it actually advisable to use tls on smtp? When I tried
> it
> out with my self-signed certificates just to see if
t on the above, please? Many thanks!
--
View this message in context:
http://postfix.1071664.n5.nabble.com/Postfix-cannot-start-tls-handshake-failure-tp89684p89727.html
Sent from the Postfix Users mailing list archive at Nabble.com.
he date this all went down hill, too.
Do you think this has a possibility?
--
View this message in context:
http://postfix.1071664.n5.nabble.com/Postfix-cannot-start-tls-handshake-failure-tp89684p89726.html
Sent from the Postfix Users mailing list archive at Nabble.com.
> On Mar 27, 2017, at 3:26 PM, oakley wrote:
>
> I'm now using port 25.
Perhaps. But logging associated failure is more useful than just noting
this claim.
> I've tested to see if my firewall or what ever was blocking it, but I can
> connect when I tested via;
>
> $ openssl s_client -connect
in context:
http://postfix.1071664.n5.nabble.com/Postfix-cannot-start-tls-handshake-failure-tp89684p89703.html
Sent from the Postfix Users mailing list archive at Nabble.com.
--
View this message in context:
http://postfix.1071664.n5.nabble.com/Postfix-cannot-start-tls-handshake-failure-tp89684p89697.html
Sent from the Postfix Users mailing list archive at Nabble.com.
> On Mar 27, 2017, at 1:51 PM, oakley wrote:
>
> Appreciate the reply, Viktor. I've done everything you've suggested...
Not quite, as you're not connecting to the right relay service. Do
check an authoritative source on what relayhost you're supposed to use.
> This is when I use:
> *smtp_tls
.amazon.com/ses/latest/DeveloperGuide/postfix.html
Thanks for any help, Viktor.
Really appreciate it.
best regards,
--
View this message in context:
http://postfix.1071664.n5.nabble.com/Postfix-cannot-start-tls-handshake-failure-tp89684p89688.html
Sent from the Postfix Users mailing list archive at Nabble.com.
> On Mar 27, 2017, at 1:09 PM, oakley wrote:
>
> SSL_connect error to email-smtp.eu-west-1.amazonaws.com[52.51.114.192]:25: -1
>
> localhost postfix/smtp[2100]: warning: TLS library problem:
> error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:
> unknown protocol:s23_clnt.c:794:93591BE
/postfix.1071664.n5.nabble.com/Postfix-cannot-start-tls-handshake-failure-tp89684.html
Sent from the Postfix Users mailing list archive at Nabble.com.
18 matches
Mail list logo
