We upgraded SMG (on ESX) to newest version 10.6-5 and now we have problems receiving TLS mails from a few customers. They receive a TLS-Handshake error.
We have TLS active in MSG since two years (with disabled SSLv3), all worked fine until we did the upgrade. Now we noticed, that the problem coheres with the "Disable SSL v3" setting in SMG. When we deactivate this setting (so enabling SSL v3) the problem is solved. But this is not an acceptable solution.
You can reproduce this behavior by testing your own SMG 10.6-5 with the TLS test on https://de.ssl-tools.net/mailservers. Whe SSL v3 is disabled, you will get an handshake error and the test fails. When SSL v3 is enabled, the test result is ok, but you will receive a warning, that weak protokoll SSL v3 is active... Great!
Any ideas or same problem somwhere? Thanks...