Re: New postfix-3.8.20221007p12 broken TLS for Gmail servers?

On Sat, Feb 03, 2024 at 03:00:10AM +0300, Mark wrote:
> Hi.
>
> It seems that the recent Postfix update under 7.4-amd64,
> (package: postfix-3.8.20221007p12-sasl2-mysql) breaks TLS connections,
> coming from Gmail servers, throwing a TLS library problem.
>
> Here's the log output;
>
> postfix/smtpd[32879]: connect from mail-yw1-f178.google.com[209.85.128.178]
>
> postfix/smtpd[7374]: Trusted TLS connection established from
> mail-lf1-f45.google.com[209.85.167.45]: TLSv1.3
> with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519
> server-signature ECDSA (prime256v1) server-digest SHA256 client-signature
> RSA-PSS (2048 bits) client-digest SHA256
>
> postfix/smtpd[7374]: warning: TLS library problem: error:0A000126:SSL
> routines::unexpected eof while reading:ssl/record/rec_layer_s3.c:308:
> postfix/smtpd[7374]: lost connection after STARTTLS from
> mail-lf1-f45.google.com[209.85.167.45]
> postfix/smtpd[7374]: disconnect from mail-lf1-f45.google.com[209.85.167.45]
> ehlo=1 starttls=1 commands=2
>
> Before updating the package, I had postfix-3.8.20221007p11, and it had no
> such problem.

Why do you run such an outdated postfix snapshot?

--
Herbert