[pfx] Re: incorrect usage of new parameters "tls_config_file" and "tls_config_name" ?

2023-06-06 Thread Viktor Dukhovni via Postfix-users
On Tue, Jun 06, 2023 at 11:52:42AM -0400, PGNet Dev wrote: > > Note that Postfix ">=TLS..." syntax explicitly sets the minimum protocol > > level, overriding any config file defaults (including crypto policy). > > i did not understand that to be the case. > > tho I *do* have > > smtp_t

[pfx] Re: incorrect usage of new parameters "tls_config_file" and "tls_config_name" ?

2023-06-06 Thread PGNet Dev via Postfix-users
The Fedora crypto policies apply to both servers and clients. Your client doing the tests is almost certainly using the default SECLEVEL=2, which disables TLSv1 and TLSv1.1. If you configure the client to also allow these protocols, the test will work as expected. The problem is not on the Post

[pfx] Re: incorrect usage of new parameters "tls_config_file" and "tls_config_name" ?

2023-06-06 Thread Viktor Dukhovni via Postfix-users
On Tue, Jun 06, 2023 at 08:21:38AM -0400, PGNet Dev via Postfix-users wrote: > postconf mail_version > mail_version = 3.8.1 > > on > > lsb_release -rd > Description:Fedora release 38 (Thirty Eight) > Release:38 The Fedora crypto