On 2025-12-12 at 10:27:13 UTC-0500 (Sat, 13 Dec 2025 02:27:13 +1100)
Viktor Dukhovni via Postfix-users <[email protected]>
is rumored to have said:

On Fri, Dec 12, 2025 at 10:21:02AM -0500, Bill Cole via Postfix-users wrote:

Dec  7 20:10:45 smtp2 postfix/smtpd[29026]: warning: TLS library
problem: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad
certificate:../ssl/record/rec_layer_s3.c:1544:SSL alert number 42:

This one is interesting because it is explicit about the problem. It does not like something about your certificate. which could be one or more of:

But since, with unathenticated opportunistic TLS in SMTP there's not
just reason to expect any sort of "valid" certificate, the particular
client is merely stupidly shoorting itself in the foot.  Just let it
do that.  Not the OP's problem.

Not the OP's fault, yet still the OP's problem, as they are the party most interested in receiving the mail. One can debate the moral responsibility and propriety of the situation yet the entire problem can be resolved by the OP using a verifiable certificate.




--
Bill Cole
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to