On Wed, Mar 26, 2014 at 10:58:12AM +0100, Robert Schetterer wrote: > Hi, on ubuntu lucid > openssl is 0.9x > > with self compiled postfix 2.11
This combination of ancient OpenSSL and bleeding edge Postfix is suboptimal from a TLS perspective. Most of the newer features in Postfix TLS support require OpenSSL 1.0.0 or newer. Real mail clients do not generally enable just TLSv1.2, there are still MTAs out there that support only SSLv3, not even TLSv1. -- Viktor.