On Sun, Apr 14, 2013 at 01:30:53PM +0000, Joan Moreau wrote:
[ You're using a mail client, whose plain-text response does not properly
"quote" material you're replying to. When posting to this list please
use a non-HTML client that gets the plain-text message right. ]
> Ok, I tried
>
> 1 - to re-install openssl 1.0.1 then recompile postfix
Done right, this is sufficient. Your compiler settings must
be wrong. Post the exact command you use the create the
Postfix "makefiles".
> 2 - to reboot on an old kernel
> 3 - to use postfix 2.9, 2.10 or 2.11-devel
> 4 - to move from SSL (465) to STARTTLS (25)
> 5 - put the ciphers req to "medium"
None of these matter. but I don't recall seeing a "postconf -n"
> In all cases, I get to something similar to:
>
> 2013-04-14T15:26:27.625728+02:00 server postfix/smtpd[20218]: warning:
> TLS library problem: 20218:error:1411C146:SSL
> routines:tls1_prf:unsupported digest type:t1_enc.c:276:
> 2013-04-14T15:26:27.625738+02:00 server postfix/smtpd[20218]: warning:
> TLS library problem: 20218:error:140D308A:SSL
> routines:tls1_setup_key_block:cipher or hash unavailable:t1_enc.c:621:
>
> Any clue ?
Your libcrypto does not support the algorithms that libssl expects, report
the output of:
unset LD_LIBRARY_PATH
unset LD_PRELOAD
ldd $(postconf -h daemon_directory)/smtpd
On MacOSX replace "ldd" with "otool -L", ...
--
Viktor.
