I would like to support, temporarily, SSLv3 in Postfix 3.1.0. I know,
SSLv3 should be depreciated, is already being deprecated, etc. But
while upgrading, it would be convenient to continue supporting those
devices (mostly scanners and printers) that cannot do TLSv1.2, giving us
time to find the owners, and move them to IP based authentication, or
some other bridge. It's a process.
I have already configured:
smtpd_tls_mandatory_protocols = SSLv3, TLSv1
smtpd_tls_protocols = SSLv3, TLSv1
Reloaded, and while postconf shows the new settings, postfix still does
not support SSLv3.
I have compared all the parameters beginning with smtpd_tls, or
containing SSL, or tls. Only the strength and the cipherslist changed
between versions (in addition to the smtpd_tls protocol parameters).
Am I missing something?
Any hints or help appreciated.
Mike
--
Michael D. Sofka [email protected]
C&MT Sr. Systems Programmer, Email, TeX, Epistemology
Rensselaer Polytechnic Institute, Troy, NY. http://www.rpi.edu/~sofkam/