Comment 6 for bug 1356843

Revision history for this message
Marc Deslauriers (mdeslaur) wrote : Re: ccs received early

OK, it turns out there is an incompatibility between the postfix package in precise and the version of openssl in precise.

This was fixed in postfix 2.10.2 by the following change:

20130616

 TLS Performance: the Postfix SMTP server TLS session cache
 was ineffective because recent OpenSSL versions enable
 session tickets by default, resulting in a different ticket
 encryption key for each smtpd(8) process. The workaround
 turns off session tickets. In 2.11 we'll enable session
 tickets properly. Viktor Dukhovni. File: tls/tls_server.c.

This was causing the postfix server to respond in an invalid way, resulting in the openssl security fix to trigger the error.