https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200903
Bug ID: 200903
Summary: sendmail default configuration was broken by
FreeBSD-SA-15:10.openssl
Product: Base System
Version: 10.1-RELEASE
Hardware: Any
OS: Any
Status: New
Severity: Affects Many People
Priority: ---
Component: conf
Assignee: [email protected]
Reporter: [email protected]
I'm running default sendmail configuration just for forwarding mail for
logwatch. The /etc/mail/certs/ directory doesn't contains dh.param file, so
sendmail tries to use some internal default that is shorter than 768 bits, and
I'm getting the following errors:
> Jun 16 14:41:39 cs0 sm-msp-queue[9971]: STARTTLS=client, error: connect
> failed=-1, reason=dh key too small, SSL_error=1, errno=0, retry=-1
> Jun 16 14:41:39 cs0 sm-mta[9973]: STARTTLS=server, error: accept failed=0,
> reason=sslv3 alert handshake failure, SSL_error=1, errno=0, retry=-1,
> relay=localhost [127.0.0.1]
> Jun 16 14:41:39 cs0 sm-msp-queue[9971]: ruleset=tls_server, arg1=SOFTWARE,
> relay=[127.0.0.1], reject=403 4.7.0 TLS handshake.
> Jun 16 14:41:39 cs0 sm-mta[9973]: t5GBfd11009973: localhost [127.0.0.1] did
> not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[email protected]"
