link2xt 14ca95d25a fix(postfix): set smtpd_tls_mandatory_protocols for port 25 ...

smtp_tls_mandatory_protocols does not affect port 25
because we require STARTTLS on port 25 since commit
8d7e1dad0e

We don't have any smtpd ports with opportunistic TLS.
Submission ports require TLSv1.3 and starting with this commit
MX port will require TLSv1.2 instead of TLSv1.

I have not managed to connect using TLSv1.1
even without this fix to reproduce the problem,
but I have checked that setting
`-o smtpd_tls_mandatory_protocols=>=TLSv1.3`
does not allow to connect using TLSv1.2 anymore using
`openssl s_client -connect example.org:25 -starttls smtp -tls1_2`.

`smtpd_tls_protocols` setting is removed
because it does not affect anything except the internal ports
and its `git blame` points to the wrong commit.

2025-11-15 10:51:04 +00:00

..

src/cmdeploy

fix(postfix): set smtpd_tls_mandatory_protocols for port 25

2025-11-15 10:51:04 +00:00

pyproject.toml

CI: ignore PLC0415 in ruff (imports outside top level)

2025-06-29 19:49:17 +02:00