Hello,

I have ubuntu 22.04, dovecot 2.3.16 and old email client (Outlook 2013) and their dont support TLSv1_2.

In dovecot 10-ssl.conf i put: ssl_min_protocol = TLSv1,

in openssl.cnf i have:

openssl_conf = default_conf

[ default_conf ]

ssl_conf = ssl_section

[ssl_section]

system_default = ssl_default_sectq

[ssl_default_sect]

MinProtocol = TLSv1

CipherString = DEFAULT:@SECLEVEL=1

but when i check openssl s_client -connect localhost:993 -tls1_1

have output:

CONNECTED(00000003)

803BD26AC67F0000:error:0A000126:SSL routines:ssl3_read_n:unexpected eof while reading:../ssl/record/rec_layer_s3.c:308:

---

no peer certificate available

---

No client certificate CA names sent

---

SSL handshake has read 0 bytes and written 111 bytes

Verification: OK

---

New, (NONE), Cipher is (NONE)

Secure Renegotiation IS NOT supported

Compression: NONE

Expansion: NONE

No ALPN negotiated

SSL-Session:

    Protocol  : TLSv1.1

    Cipher    : 0000

    Session-ID:

    Session-ID-ctx:

    Master-Key:

    PSK identity: None

    PSK identity hint: None

    SRP username: None

    Start Time: 1668602712

    Timeout   : 7200 (sec)

    Verify return code: 0 (ok)

    Extended master secret: no

---

version tls1_2 and 1_3 works fine.

What I doing wrong?

Thanks for help.