On Thu, Sep 19, 2024 at 09:18:23PM +1200, Peter via Postfix-users wrote:
> On 19/09/24 21:10, Viktor Dukhovni via Postfix-users wrote:
> > On Thu, Sep 19, 2024 at 10:01:16AM +0200, Geert Hendrickx via Postfix-users
> > wrote:
> >
> > > > Anonymous TLS connection established from X: TLSv1.3 with cipher
> > > > TLS_AES_128_GCM_SHA256
> > > > (128/128 bits) key-exchange x25519_kyber768 server-signature ECDSA
> > > > (prime256v1)
> > > > server-digest SHA256
> > >
> > > Thanks Viktor!
> >
> > Good to know it worked, I did not have an easy way to test this, since
> > no such providers are built on my end. Test drive this some more, and
> > if all is well, I'll send the combined patch to Wietse (or he can of
> > course extract both parts from this thread).
>
> I take it this change would appear in Postfix 3.10.0?
Yes.
> Will this bump the minimum openssl version to 3.x?
No, OpenSSL 1.1.1 will remain the floor. The patch is compatible with
OpenSSL 1.1.1 and up.
--
Viktor.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
