Applicable to:
- Plesk for Linux
Symptoms
-
Old mail client such as Outlook 2007 is not able to send a mail via SSL/TLS.
-
The log file
/var/log/maillogcontains one of the following error messages from Postfix or Courier:CONFIG_TEXT: courier-imaps: couriertls: accept: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
postfix/smtpd[17918]: warning: TLS library problem: 21146:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:340:CONFIG_TEXT: postfix/smtpd: warning: TLS library problem: 7346:error:1408F10B:SSL routlines: SSL3_GET_CLIENT_HELLO:no shared cipher:s3_srvr.c:1387
Cause
SSLv3 support was disabled.
Note: SSLv3 was removed from the core crypto libraries since RHEL 8. See the official documentation for details.
Resolution
Apply on of the following alternatives:
-
Upgrade Outlook version.
-
Connect to the server using SSH and enable backward compatibility with old mail clients:
-
Set
TLS_PROTOCOL=SSL23in/etc/courier-imap/pop3d-ssland/etc/courier-imap/imapd-ssl.Note: SSL23 will enable all SSL/TLS protocols.
-
Edit
/etc/postfix/main.cfand set the following:CONFIG_TEXT: smtp_tls_security_level = may
tls_medium_cipherlist = MEDIUM:!aNULL:!MD5 -
Reload both Postfix and Courier services:
# service postfix reload && service courier reload
-
Comments
2 comments
Hi Marc,
For some reason This command to the Server DIR does not work with me:
Set TLS_PROTOCOL=SSL23 in /etc/courier-imap/pop3d-ssl and /etc/courier-imap/imapd-ssl
When I try to change to the directories I get the error that it does not Exist. I have Plesk Obsidian Web Host Edition
Version 18.0.37 Update #2
I can't find the directory either.
Please sign in to leave a comment.