AW: TLS library problem

[Daniel]

Hi,

kannst Mailserver z.B. auf https://de.ssl-tools.net/mailservers prüfen lassen, dann hast auch entsprechende Meldungen im Log, dass diverse SSL/TLS Versionen getestet werden. Sieht dann gekürzt etwa so aus:

postfix/smtpd[10535]: connect from ssl-tools.net[185.55.116.145]
postfix/smtpd[10537]: connect from unknown[2a00:c380:c0de:0:5054:ff:fe7e:d742]
postfix/smtpd[10535]: Anonymous TLS connection established from ssl-tools.net[185.55.116.145]: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)
postfix/smtpd[10537]: Anonymous TLS connection established from unknown[2a00:c380:c0de:0:5054:ff:fe7e:d742]: TLSv1.1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)
postfix/smtpd[10537]: Anonymous TLS connection established from ssl-tools.net[185.55.116.145]: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)
postfix/smtpd[10537]: SSL_accept error from ssl-tools.net[185.55.116.145]: -1
postfix/smtpd[10537]: warning: TLS library problem: error:1408A10B:SSL routines:ssl3_get_client_hello:wrong version number:s3_srvr.c:960:
postfix/smtpd[10537]: SSL_accept error from ssl-tools.net[185.55.116.145]: -1
postfix/smtpd[10537]: warning: TLS library problem: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher:s3_srvr.c:1417:
postfix/smtpd[10537]: Anonymous TLS connection established from ssl-tools.net[185.55.116.145]: TLSv1.2 with cipher AES256-SHA (256/256 bits)
postfix/smtpd[10535]: Anonymous TLS connection established from unknown[2a00:c380:c0de:0:5054:ff:fe7e:d742]: TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)

Gruß Daniel

-----Ursprüngliche Nachricht-----
Von: Postfixbuch-users [mailto:postfixbuch-users-bounces at listen.jpberlin.de] Im Auftrag von Andreas Meyer
Gesendet: Montag, 1. August 2016 16:16
An: postfixbuch-users at listen.jpberlin.de
Betreff: TLS library problem

Hallo!

Weis jemand, was mir die folgenden Zeilen sagen wollen?

Aug  1 13:34:44 bitmachine1 postfix/smtpd[32257]: warning: TLS library problem: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:347:
Aug  1 15:50:50 bitmachine1 nimmini/smtpd[808]: warning: TLS library problem: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:650:

Grüße

  Andreas