Log tls cipher information
Open, LowPublic
Actions

Assigned To

Authored By

	jhathaway
	Dec 10 2024, 9:34 PM

Description

Currently we do not log any TLS cipher info, https://www.postfix.org/TLS_README.html

$ sudo postconf |grep smtpd_tls_loglevel
smtpd_tls_loglevel = 0
tlsproxy_tls_loglevel = $smtpd_tls_loglevel

increasing to 1, should give us enough info.

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	postfix: Enable summary messages on TLS handshakes	operations/puppet	production	+4 -0
	postfix: Enable summary messages on TLS handshakes	operations/puppet	production	+2 -2

Status	Assigned	Task
Resolved	jhathaway	T232343 Consider Postfix as MTA for our MXes (and OTRS/Mailman/Phab)
Open	None	T325394 Replace Exim with Postfix on mail servers
Open	jhathaway	T381927 Log tls cipher information

jhathaway triaged this task as Low priority.Dec 16 2024, 3:27 PM

Change #1105760 had a related patch set uploaded (by BCornwall; author: BCornwall):

[operations/puppet@production] postfix: Enable summary messages on TLS handshakes

Change #1105760 abandoned by BCornwall:

[operations/puppet@production] postfix: Enable summary messages on TLS handshakes

Reason:

If57b9e0a532ae28d8d51dd270ca21f9ce29eadb9

Change #1105780 had a related patch set uploaded (by BCornwall; author: JHathaway):

[operations/puppet@production] postfix: Enable summary messages on TLS handshakes

Change #1105780 merged by JHathaway:

[operations/puppet@production] postfix: Enable summary messages on TLS handshakes