One more note. I find that kmail3 only works with LS.MinProtocol = TLSv1.0, whereas the openssl command appear to reach "+OK Hello there." with it set to TLSv1.1. So that's a bit weird.