Friday, February 02, 2024

New postfix-3.8.20221007p12 broken TLS for Gmail servers?

Hi.

It seems that the recent Postfix update under 7.4-amd64,
(package: postfix-3.8.20221007p12-sasl2-mysql) breaks TLS connections,
coming from Gmail servers, throwing a TLS library problem.

Here's the log output;

postfix/smtpd[32879]: connect from mail-yw1-f178.google.com[209.85.128.178]

postfix/smtpd[7374]: Trusted TLS connection established from
mail-lf1-f45.google.com[209.85.167.45]: TLSv1.3
with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519
server-signature ECDSA (prime256v1) server-digest SHA256 client-signature
RSA-PSS (2048 bits) client-digest SHA256

postfix/smtpd[7374]: warning: TLS library problem: error:0A000126:SSL
routines::unexpected eof while reading:ssl/record/rec_layer_s3.c:308:
postfix/smtpd[7374]: lost connection after STARTTLS from
mail-lf1-f45.google.com[209.85.167.45]
postfix/smtpd[7374]: disconnect from mail-lf1-f45.google.com[209.85.167.45]
ehlo=1 starttls=1 commands=2

Before updating the package, I had postfix-3.8.20221007p11, and it had no
such problem.

Any idea?

Regards.

Mark.

No comments:

Post a Comment