Re: Time to validate the TLS configuration on your SMTP servers (was: Re: AS5 ipv6 hijack?)

2021-04-12 Thread Julien Goodwin
A slightly nicer tool than just using "openssl s_client" is testssl.sh, handles STARTTLS and some other non-trivial cases. https://testssl.sh/ Back when I first used it I did read the source, these days at ~650k of shell script, that's a little less practical. On 12/4/21 10:58 pm, Bjørn Mork wro

Time to validate the TLS configuration on your SMTP servers (was: Re: AS5 ipv6 hijack?)

2021-04-12 Thread Bjørn Mork
OK, so that email bounced. Or will eventually because this does not go away with someone doing something: ... Deferred: 403 4.7.0 TLS handshake failed. I am posting this in public because it unfortunately is a very common problem. Debian buster was released on July 6th, 2019. It includes open