Re: New postfix-3.8.20221007p12 broken TLS for Gmail servers?

2024-02-03 Thread Mark
> 3.7.9 is a newer version than 3.8.20221007 Stuart, thanks very much for this information, I didn't know about that. Moved to 3.7.9 and it's working fine right now. Configured my postfix from scratch, though, to prevent any misconfiguration on my side. Best wishes, Mark. Stuart Henderson ,

Re: New postfix-3.8.20221007p12 broken TLS for Gmail servers?

2024-02-03 Thread Stuart Henderson
On 2024-02-03, Mike Fischer wrote: > >> Am 03.02.2024 um 03:44 schrieb Brian Conway : >> >>> Why do you run such an outdated postfix snapshot? >> >> That is the latest version that is supported/available in packages-stable: >> >> https://cdn.openbsd.org/pub/OpenBSD/7.4/packages-stable/amd64/ >

Re: New postfix-3.8.20221007p12 broken TLS for Gmail servers?

2024-02-03 Thread Stuart Henderson
On 2024-02-03, Mark wrote: > Hi again, > > I completely removed Postfix and installed the official stable package > "postfix-3.7.9p0-sasl2-mysql", but the problem persists. There is possibly still some conflict between openssl (required by newer versions of postfix) and libressl (used by pretty

Re: New postfix-3.8.20221007p12 broken TLS for Gmail servers?

2024-02-03 Thread Mike Fischer
> Am 03.02.2024 um 03:44 schrieb Brian Conway : > >> Why do you run such an outdated postfix snapshot? > > That is the latest version that is supported/available in packages-stable: > > https://cdn.openbsd.org/pub/OpenBSD/7.4/packages-stable/amd64/ While we have not encountered the TLS issue

Re: New postfix-3.8.20221007p12 broken TLS for Gmail servers?

2024-02-02 Thread Mark
As an additional note; I upgraded my server yesterday from (amd64) OpenBSD 7.3 to 7.4 by sysupgrade tool (remotely - unattended way). Is it possible that the upgrade process created trouble with TLS, SSL libraries? It was completed without any "visible" issue, as far as I can tell. Regards.

Re: New postfix-3.8.20221007p12 broken TLS for Gmail servers?

2024-02-02 Thread Mark
Hi again, I completely removed Postfix and installed the official stable package "postfix-3.7.9p0-sasl2-mysql", but the problem persists. P.S.: The issue only happens with incoming mails from Gmail servers. (Well, I do have the needed lines recommended in smtp-smuggling page, the ones for

Re: New postfix-3.8.20221007p12 broken TLS for Gmail servers?

2024-02-02 Thread Herbert J. Skuhra
On Sat, Feb 03, 2024 at 09:19:47AM +0300, Mark wrote: > An experimental, unstable package in packages-stable? > > An outdated and potentially vulnerable software in the latest OpenBSD > 7.4-stable? > > I must really have been missing something here... Just a few links:

Re: New postfix-3.8.20221007p12 broken TLS for Gmail servers?

2024-02-02 Thread Mark
An experimental, unstable package in packages-stable? An outdated and potentially vulnerable software in the latest OpenBSD 7.4-stable? I must really have been missing something here... Herbert J. Skuhra , 3 Şub 2024 Cmt, 09:04 tarihinde şunu yazdı: > On Fri, Feb 02, 2024 at 08:44:45PM -0600,

Re: New postfix-3.8.20221007p12 broken TLS for Gmail servers?

2024-02-02 Thread Herbert J. Skuhra
On Fri, Feb 02, 2024 at 08:44:45PM -0600, Brian Conway wrote: > On Fri, Feb 2, 2024, at 6:44 PM, Herbert J. Skuhra wrote: > > On Sat, Feb 03, 2024 at 03:00:10AM +0300, Mark wrote: > >> Hi. > >> > >> It seems that the recent Postfix update under 7.4-amd64, > >> (package:

Re: New postfix-3.8.20221007p12 broken TLS for Gmail servers?

2024-02-02 Thread Brian Conway
On Fri, Feb 2, 2024, at 6:44 PM, Herbert J. Skuhra wrote: > On Sat, Feb 03, 2024 at 03:00:10AM +0300, Mark wrote: >> Hi. >> >> It seems that the recent Postfix update under 7.4-amd64, >> (package: postfix-3.8.20221007p12-sasl2-mysql) breaks TLS connections, >> coming from Gmail servers, throwing

Re: New postfix-3.8.20221007p12 broken TLS for Gmail servers?

2024-02-02 Thread Herbert J. Skuhra
On Sat, Feb 03, 2024 at 03:00:10AM +0300, Mark wrote: > Hi. > > It seems that the recent Postfix update under 7.4-amd64, > (package: postfix-3.8.20221007p12-sasl2-mysql) breaks TLS connections, > coming from Gmail servers, throwing a TLS library problem. > > Here's the log output; > >

New postfix-3.8.20221007p12 broken TLS for Gmail servers?

2024-02-02 Thread Mark
Hi. It seems that the recent Postfix update under 7.4-amd64, (package: postfix-3.8.20221007p12-sasl2-mysql) breaks TLS connections, coming from Gmail servers, throwing a TLS library problem. Here's the log output; postfix/smtpd[32879]: connect from mail-yw1-f178.google.com[209.85.128.178]