Re: Unable to send or receive from Gmail

2019-06-23 Thread Matus UHLAR - fantomas
On 22.06.19 15:03, Security Admin (NetSec) wrote: I figured TLS 1.3 might be the culprit from the logs. The OpenSSL version shows "OpenSSL 1.1.1 11 Sep 2018" and it was updated recently via Ubuntu. How might I go about not negotiating TLS 1.3, as it is obvious I need to update some certific

Re: Unable to send or receive from Gmail

2019-06-22 Thread Security Admin (NetSec)
" If you are netsecdesign.com, ssllabs says your cert has issues. Not that this may be your problem, but I would fix that first." This cert is not the same cert or the same server or the same IP address as my postfix SMTP gateway. The postfix SMTP gateway uses a self-signed certificate. On 6

Re: Unable to send or receive from Gmail (temp solution)

2019-06-22 Thread Security Admin (NetSec)
Doh! !TLSv1.3 added to "main.conf" fixed the issue hopefully. Will work on updating certificate later... On 6/22/19, 8:10 AM, "owner-postfix-us...@postfix.org on behalf of Security Admin (NetSec)" wrote: I figured TLS 1.3 might be the culprit from the logs. The OpenSSL version show

Re: Unable to send or receive from Gmail

2019-06-22 Thread Security Admin (NetSec)
to send or receive from Gmail If you are netsecdesign.com, ssllabs says your cert has issues. Not that this may be your problem, but I would fix that first. From: secad...@netsecdesign.com Sent: June 21, 2019 9:19 PM To: postfix-users@postfix.org Subject: Unable to send or receive from Gmail Withi

Re: Unable to send or receive from Gmail

2019-06-22 Thread lists
10:13 PM To: Security Admin <secad...@netsecdesign.com>, "postfix-users@postfix.org" <postfix-users@postfix.org> Subject: Re: Unable to send or receive from Gmail   If you are netsecdesign.com, ssllabs says your cert has issues. Not that this may be your problem, but I wou

Re: Unable to send or receive from Gmail

2019-06-22 Thread Security Admin (NetSec)
I figured TLS 1.3 might be the culprit from the logs. The OpenSSL version shows "OpenSSL 1.1.1 11 Sep 2018" and it was updated recently via Ubuntu. How might I go about not negotiating TLS 1.3, as it is obvious I need to update some certificates (which I will worry about later). Edward Ray

Re: Unable to send or receive from Gmail

2019-06-21 Thread Viktor Dukhovni
> On Jun 22, 2019, at 1:12 AM, lists wrote: > > If you are netsecdesign.com, ssllabs says your cert has issues. Not that this > may be your problem, but I would fix that first. The certificate is past its nominal expiration, but perhaps more importantly its "Basic Key Usage" field says:

Re: Unable to send or receive from Gmail

2019-06-21 Thread Viktor Dukhovni
On Sat, Jun 22, 2019 at 04:09:45AM +, Security Admin (NetSec) wrote: > Within the last week or so I am suddenly unable to send or receive from > Google Gmail. Any help with this issue would be appreciated. What version of OpenSSL is installed on your system? Was it upgraded recently? You a

Re: Unable to send or receive from Gmail

2019-06-21 Thread lists
.  From: secad...@netsecdesign.comSent: June 21, 2019 9:19 PMTo: postfix-users@postfix.orgSubject: Unable to send or receive from

Unable to send or receive from Gmail

2019-06-21 Thread Security Admin (NetSec)
Within the last week or so I am suddenly unable to send or receive from Google Gmail. Any help with this issue would be appreciated. Receive Error from mail.log: Jun 21 20:59:26 portus postfix/smtpd[3726]: SSL_accept:SSLv3/TLS write certificate Jun 21 20:59:26 portus postfix/smtpd[3726]: SSL_a