Re: warning: TLS library problem: routines:ssl_choose_client_version:unsupported protocol?

2020-02-07 Thread lists
https://access.redhat.com/solutions/120383Did you do the poodle block back in the day? 

Re: warning: TLS library problem: routines:ssl_choose_client_version:unsupported protocol?

2020-02-07 Thread Viktor Dukhovni
On Sat, Feb 08, 2020 at 09:36:41AM +0300, Andreas X wrote: > Hi everyone. I have a php contact form, that reports the following postfix > error (getting that in maillog file): https://hastepaste.com/view/jr41N It is rude to post links to pastebins. If you want help, please paste all the logs for

Re: warning: TLS library problem - messages in log

2018-04-29 Thread Viktor Dukhovni
> On Apr 29, 2018, at 12:06 PM, Dominic Raferd wrote: > > > Thanks Viktor, I will bear this in mind for the future. But even if > (with your help) I could determine exactly what the problem was for > these two senders I think there is zero chance they would be > interested in hearing from me a

Re: warning: TLS library problem - messages in log

2018-04-29 Thread Dominic Raferd
On 29 April 2018 at 16:57, Viktor Dukhovni wrote: > > >> On Apr 29, 2018, at 3:37 AM, Dominic Raferd wrote: >> >> This is a genuine and expected sender (VoIP provider). I am less sure >> about atlas.net.tr, but it is probably genuine and expected by >> recipient too. Unwanted ones I have not both

Re: warning: TLS library problem - messages in log

2018-04-29 Thread Viktor Dukhovni
> On Apr 29, 2018, at 3:37 AM, Dominic Raferd wrote: > > This is a genuine and expected sender (VoIP provider). I am less sure > about atlas.net.tr, but it is probably genuine and expected by > recipient too. Unwanted ones I have not bothered to report here. > > I don't require encryption on p

Re: warning: TLS library problem - messages in log

2018-04-29 Thread Dominic Raferd
On 29 April 2018 at 08:35, Viktor Dukhovni wrote: > > >> On Apr 29, 2018, at 3:28 AM, @lbutlr wrote: >> >> It appears that Swiss domain uses Google for their email: >> >> finarea.ch. 21599 IN MX 20 alt2.aspmx.l.google.com. >> finarea.ch. 21599 IN MX 30

Re: warning: TLS library problem - messages in log

2018-04-29 Thread Viktor Dukhovni
> On Apr 29, 2018, at 3:28 AM, @lbutlr wrote: > > It appears that Swiss domain uses Google for their email: > > finarea.ch. 21599 IN MX 20 alt2.aspmx.l.google.com. > finarea.ch. 21599 IN MX 30 aspmx2.googlemail.com. > finarea.ch. 21599 IN

Re: warning: TLS library problem - messages in log

2018-04-29 Thread @lbutlr
On 29 Apr 2018, at 01:18, Dominic Raferd wrote: > I've now found similar fall-backs for atlas.net.tr (Turkish service > provider) - same TLS problem 'error:1408A10B:SSL > routines:ssl3_get_client_hello:wrong version number:s3_srvr.c:960:'. I > guess that (in both cases) this is because the incomin

Re: warning: TLS library problem - messages in log

2018-04-29 Thread Dominic Raferd
On 28 April 2018 at 15:43, Viktor Dukhovni wrote: > > >> On Apr 28, 2018, at 3:40 AM, Dominic Raferd wrote: >> >> So far I have one genuine sender that is failing TLS, but upon >> checking I see that it falls back to cleartext. > > It'd be interesting to know why that particular sender is having

Re: warning: TLS library problem - messages in log

2018-04-28 Thread Viktor Dukhovni
> On Apr 28, 2018, at 3:40 AM, Dominic Raferd wrote: > > So far I have one genuine sender that is failing TLS, but upon > checking I see that it falls back to cleartext. It'd be interesting to know why that particular sender is having trouble. Can you provide more detail? Some senders have S

Re: warning: TLS library problem - messages in log

2018-04-28 Thread Dominic Raferd
On 27 April 2018 at 17:17, Viktor Dukhovni wrote: > > >> On Apr 27, 2018, at 2:22 AM, Dominic Raferd wrote: >> >> $ grep -a "warning: TLS library problem" /var/log/mail.log.1 >> /var/log/mail.log|grep -o "error:.*"|sort|uniq -c|sort -nr >> 12 error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong

Re: warning: TLS library problem - messages in log

2018-04-27 Thread Viktor Dukhovni
> On Apr 27, 2018, at 2:22 AM, Dominic Raferd wrote: > > $ grep -a "warning: TLS library problem" /var/log/mail.log.1 > /var/log/mail.log|grep -o "error:.*"|sort|uniq -c|sort -nr > 12 error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version > number:s3_pkt.c:362: > 11 error:1408A10B:SS

Re: warning: TLS library problem - messages in log

2018-04-27 Thread Dominic Raferd
On 27 April 2018 at 08:57, Poliman - Serwis wrote: > 2018-04-27 8:22 GMT+02:00 Dominic Raferd : >> >> I have always received a number of warning messages (from >> postfix/smtpd) stating 'TLS library problem' in my mail logs and I >> think they are always followed by a dropped incoming connection.

Re: warning: TLS library problem - messages in log

2018-04-27 Thread Poliman - Serwis
I have almost same logs. Some time ago I asked people on this mailing list. They said that somebody tries to connect to your server but he can't because of too old ssl he uses. You can ignore it. 2018-04-27 8:22 GMT+02:00 Dominic Raferd : > I have always received a number of warning messages (fro

Re: warning: TLS library problem

2018-01-25 Thread Matus UHLAR - fantomas
On Jan 24, 2018, at 9:25 PM, li...@lazygranch.com wrote: postfix/smtpd[14755]: warning: TLS library problem: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:640: Should I be blocking some encryption method? I thought openssl dropped support for the hackable protoco

Re: warning: TLS library problem

2018-01-24 Thread Viktor Dukhovni
> On Jan 24, 2018, at 9:25 PM, li...@lazygranch.com wrote: > > postfix/smtpd[14755]: warning: TLS library problem: error:140760FC:SSL > routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:640: > > Should I be blocking some encryption method? I thought openssl dropped > support for the h

RE: warning: TLS library problem: 457:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:293:

2011-09-20 Thread Driessen
On Behalf Of Thomas Glanzmann > > Has someone an idea what the problem is here and how I can get a > workaround to > not offer startssl to the hays mailservers? smtpd_discard_ehlo_keyword_address_maps Mit freundlichen Grüßen Drießen -- Software & Computer Uwe Drießen Lembergstraße 33 67824