TLS/SSL errors

[azuercher]

Hello,
I have received notice that some (one sender, specifically) outside email is failing. I checked the logs and see TLS/SSL errors:

Feb 13 11:49:42 spam postfix/smtpd[4538]: connect from foo.domain.org
Feb 13 11:49:42 spam postfix/smtpd[4538]: setting up TLS connection from foo.domain.org
Feb 13 11:49:42 spam postfix/smtpd[4538]: SSL_accept error from foo.domain.org
Feb 13 11:49:42 spam postfix/smtpd[4538]: warning: TLS library problem: 4538:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:s3_pkt.c:1259:SSL alert number 46:
Feb 13 11:49:42 spam postfix/smtpd[4538]: lost connection after STARTTLS from foo.domain.org

I am researching this error now but if there is a known solution please advise. I am running latest version (3.0.8)

Thanks,
Aaron

[shawniverson]

Looks like the remote party is using a self-signed or otherwise untrusted cert...

[shawniverson]

Also, because of security, SSLv3 is off...

You would need to downgrade your security to allow this connection...

[azuercher]

Shawn,
I am using a self-signed certificate as well. Is the problem with my certificate or theirs? They are running MS Exchange, not sure what version.

Thanks,
Aaron

[MaxMoon]

To check your own or other certs try https://ssl-tools.net/