<div style="font-family: Arial; font-size: 14px;"><span>Hello,</span><div>I have ubuntu 22.04, dovecot 2.3.16 and old email client (Outlook 2013) and their dont support TLSv1_2.</div><div>In dovecot 10-ssl.conf i put: <span>ssl_min_protocol = TLSv1</span>, <br></div><div>in openssl.cnf i have:</div><div><span><span>openssl_conf = default_conf</span><br></span></div><div><span>[ default_conf ]</span><div><span>ssl_conf = ssl_section</span></div><div><span>[ssl_section]</span></div><div><span>system_default = ssl_default_sectq</span></div><div><span>[ssl_default_sect]</span></div><div><span>MinProtocol = TLSv1</span></div><span>CipherString = DEFAULT:@SECLEVEL=1</span></div><div><span><br></span></div><div><span>but when i check <span>openssl s_client -connect localhost:993 -tls1_1</span><br></span></div><div><span>have output:</span></div><div><span><br></span></div><div><span><span>CONNECTED(00000003)</span><div><span>803BD26AC67F0000:error:0A000126:SSL routines:ssl3_read_n:unexpected eof while reading:../ssl/record/rec_layer_s3.c:308:</span></div><div><span>---</span></div><div><span>no peer certificate available</span></div><div><span>---</span></div><div><span>No client certificate CA names sent</span></div><div><span>---</span></div><div><span>SSL handshake has read 0 bytes and written 111 bytes</span></div><div><span>Verification: OK</span></div><div><span>---</span></div><div><span>New, (NONE), Cipher is (NONE)</span></div><div><span>Secure Renegotiation IS NOT supported</span></div><div><span>Compression: NONE</span></div><div><span>Expansion: NONE</span></div><div><span>No ALPN negotiated</span></div><div><span>SSL-Session:</span></div><div><span>    Protocol  : TLSv1.1</span></div><div><span>    Cipher    : 0000</span></div><div><span>    Session-ID:</span></div><div><span>    Session-ID-ctx:</span></div><div><span>    Master-Key:</span></div><div><span>    PSK identity: None</span></div><div><span>    PSK identity hint: None</span></div><div><span>    SRP username: None</span></div><div><span>    Start Time: 1668602712</span></div><div><span>    Timeout   : 7200 (sec)</span></div><div><span>    Verify return code: 0 (ok)</span></div><div><span>    Extended master secret: no</span></div><div><span>---</span></div><span></span><br></span></div><div><span>version tls1_2 and 1_3 works fine.</span></div><div><span>What I doing wrong?</span></div><span><span>Thanks for help.</span></span><br></div><br>