TLS misconfigured on inbound SMTP

Issue #733 closed
Roman created an issue

According to this test, https://luxsci.com/smtp-tls-checker there is only TLS1.3 supported:

RESULTS FOR POSTE.IO

SMTP TLS GRADE: C+

TLS v1.0 Supported? No

TLS v1.2 Supported? No

TLS v1.3 Supported? Yes

Same for domains hosted on my poste.io instance

Comments (3)

  1. SH repo owner

    It seems that the test is somehow flawed, you can check yourself by

    openssl s_client -starttls smtp -connect mail.poste.io:25 -tls1_2
    

    You can also check version at log viewer at protocol details, connection should have line like:

    2020-02-13 09:59:44         [tls] [INFO] - secured: cipher=ECDHE-RSA-AES128-GCM-SHA256 version=TLSv1.2 verified=false
    

    Nevertheless I’ve contacted test owner to check how they are really testing TLS

  2. SH repo owner

    Closing for now, this test seems to be flawed, you can check yourself from commandline that it actualy works

  3. Log in to comment