On Thu, Jan 02, 2020 at 01:02:51PM -0500, James B. Byrne wrote:
> The following are the settings in main.cf that have been changed
> followed by the commented (#) default values:
>
> postconf -n | grep smtp | grep tls
Whatever you did to post this, thoroughly mangled the output, but
amidst the carnage, I see:
> smtp_tls_mandatory_protocols = TLSv1.3, TLSv1.2, !TLSv1.1, !TLSv1, !SSLv3,
> !SSLv2
> smtp_tls_protocols = TLSv1.3, TLSv1.2, !TLSv1.1, !TLSv1, !SSLv3, !SSLv2
>
> smtpd_tls_mandatory_protocols = TLSv1.3, TLSv1.2, !TLSv1.1, !TLSv1, !SSLv3,
> !SSLv2
> smtpd_tls_protocols = TLSv1.3, TLSv1.2, !TLSv1.1, !TLSv1, !SSLv3, !SSLv2
The observed symptoms are with high probability caused by disabling TLSv1,
and not the random cipher tweaks.
--
Viktor.
