On Thu, Apr 03, 2025 at 12:40:02PM +0200, Paul Neuwirth via Postfix-users wrote:

> that makes totally sense.
> 
> I am struggling with that scanner:
> https://siwecos.de/en/app
> 
> it says:
> 
> for
> 
> SMTPS Scanner [SMTPS_TLS]
> SMTP MSA(STARTTLS) Scanner [SMTP_MSA_TLS]
> SMTP(STARTTLS) Scanner [SMTP_TLS] 
> "TLS not supported"

Congratulations, you've found another useless scanner on the Internet,
why do you care???

> for mail.swabian.net

All you need to know is that your TLS support is just fine:

    $ posttls-finger -cF /etc/ssl/cert.pem -lsecure -Lsummary 
"[mail.swabian.net]:587"
    posttls-finger: Verified TLS connection established
        to mail.swabian.net[80.152.201.148]:587: TLSv1.3 with
        cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
        key-exchange x25519
        server-signature RSA-PSS (2048 bits)
        server-digest SHA256

    $ posttls-finger -cwF /etc/ssl/cert.pem -lsecure -Lsummary 
"[mail.swabian.net]:465"
    posttls-finger: Verified TLS connection established
        to mail.swabian.net[80.152.201.148]:465: TLSv1.3 with
        cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
        key-exchange x25519
        server-signature RSA-PSS (2048 bits)
        server-digest SHA256

> I have no idea, what version or cipher they test. that's why I tried
> with openssl s_client and I cannot find any issues. :-(
> 
> contacted their support, but doubt I'll get a reply.

Just ignore them.

-- 
    Viktor.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to