Re: TLS1.2 issue with postfix and windows

2013-10-22 Thread Deniss
On 2013.10.21. 23:31, Viktor Dukhovni wrote: Once again after the handshake completes. When I try: $ posttls-finger -t30 -T 180 -c -Ldebug [mail.co.inbox.lv] posttls-finger: initializing the client-side TLS engine posttls-finger: Connected to

Re: TLS1.2 issue with postfix and windows

2013-10-22 Thread Viktor Dukhovni
On Tue, Oct 22, 2013 at 01:15:06PM +0300, Deniss wrote: So this is definitely a version of the broken Windows TLS ciphersuite problem. If you must use TLS with this server, disable TLSv1.2 and 3DES, allow medium grade ciphers (i.e. RC4) and make sure your policy tables, ... are

Re: TLS1.2 issue with postfix and windows

2013-10-21 Thread Deniss
Date: From: Subject: [none] On Sun, Oct 20, 2013 at 08:55:33PM +0300, Deniss wrote: I have an issue with postfix-2.10.2 and latest MS windows/exchange/outlook: SSL connection cannot be negotiated with default settings, there is an error in postfix log: Oct 20 20:13:41 box

Re: TLS1.2 issue with postfix and windows

2013-10-21 Thread Viktor Dukhovni
On Mon, Oct 21, 2013 at 10:22:05PM +0300, Deniss wrote: Show all related logging from process 21730. Oct 21 21:35:01 box postfix/smtp[19887]: warning: TLS library problem: 19887:error:1408F10B: SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:337: Oct 21 21:35:01 box

TLS1.2 issue with postfix and windows

2013-10-20 Thread Deniss
Hello, I have an issue with postfix-2.10.2 and latest MS windows/exchange/outlook: SSL connection cannot be negotiated with default settings, there is an error in postfix log: Oct 20 20:13:41 box postfix/smtp[21730]: warning: TLS library problem: 21730:error:1408F10B:SSL

Re: TLS1.2 issue with postfix and windows

2013-10-20 Thread Viktor Dukhovni
On Sun, Oct 20, 2013 at 08:55:33PM +0300, Deniss wrote: I have an issue with postfix-2.10.2 and latest MS windows/exchange/outlook: SSL connection cannot be negotiated with default settings, there is an error in postfix log: Oct 20 20:13:41 box postfix/smtp[21730]: warning: TLS library