Bjørn Mork created an issue: 
https://gitlab.gnome.org/Infrastructure/Infrastructure/issues/189



This causes mail delivery problems with modern TLS clients.  The issue is easy 
to reproduce with openssl 1.1:

 bjorn@canardo:~$ openssl s_client -connect smtp.gnome.org:25 -starttls smtp 
-quiet
 depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
 verify return:1
 depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
 verify return:1
 depth=0 CN = gnome.org
 verify return:1
 140507914929280:error:141A318A:SSL routines:tls_process_ske_dhe:dh key too 
small:../ssl/statem/statem_clnt.c:2150:

-- 
Reply to this email directly or view it on GitLab: 
https://gitlab.gnome.org/Infrastructure/Infrastructure/issues/189
You're receiving this email because of your account on gitlab.gnome.org.


_______________________________________________
gnome-infrastructure mailing list
[email protected]
https://mail.gnome.org/mailman/listinfo/gnome-infrastructure

Reply via email to