On Sat, 16 Sep 2017 08:16:39 -0400 Chris Chiappa <ch...@chiappa.net> wrote: > Just to help out people who might be googling for this problem, this > patch fixes this symptom in the mail logs: > > Sep 10 06:44:23 hostname postfix/smtpd[17970]: SSL_accept error from unknown[1.2.3.4]: -1 > Sep 10 06:44:23 hostname postfix/smtpd[17970]: warning: TLS library problem: error:1417D18C:SSL routines:tls_process_client_hello:version too low:../ssl/statem/statem_srvr.c:974: > Sep 10 06:44:23 hostname postfix/smtpd[17970]: lost connection after STARTTLS from unknown[1.2.3.4] > > There are certainly live systems out there that trip this. > >
It seems that no search engine indexed this. I spent a few hours finding what happened. I think the change in openssl version from 1.1.0f-4 should mentionned heavily in the NEWS file. My personal email server cannot receive emails from other servers. Of course, those other servers should be upgraded, but I don't even know how to contact them… Anyway, this patch should be integrated ASAP. At least for my own needs :) In the meantime, I'll wait with a downgraded version of openssl. Have a nice day, Adrien