Hello,

since last security update of openssl I cannot send mail with sendmail
on SL5

on client side I got :

Jul  8 02:50:18 localhost sendmail[14301]: STARTTLS=client, error: connect 
failed=-1, SSL_error=1,errno=0, retry=-1
Jul  8 02:50:18 localhost sendmail[14301]: STARTTLS=client: 
14301:error:14082174:SSLroutines:SSL3_CHECK_CERT_AND_ALGORITHM:dh key too 
small:s3_clnt.c:2429:
Jul  8 02:50:18 localhost sendmail[14301]: t680oDCp014299: 
to=<[email protected]>, delay=00:00:05,xdelay=00:00:05, mailer=smtp, 
pri=120973, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: 4034.7.0 
server not authenticated.

and on server side :

Jul  8 02:50:10 manne sendmail[14056]: STARTTLS=server, error: accept failed=0, 
SSL_error=1, errno=0,retry=-1
Jul  8 02:50:10 manne sendmail[14056]: STARTTLS=server: 
14056:error:14094410:SSLroutines:SSL3_READ_BYTES:sslv3 alert handshake 
failure:s3_pkt.c:1092:SSL alert number 40
Jul  8 02:50:10 manne sendmail[14056]: t680oA5j014056: gurtu2.lmd.jussieu.fr 
[134.157.176.59] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA


so I had to downgrade openssl on both sides to make that work.


Does anyone knows what is to be done to use the last openssl ?

Thanks for your help.


P.S.  is it normal that nss was not updated in SL5 (as it was for SL6
SL7) ?

-- 
                 Best regards,
                               Robert FRANCHISSEUR
 ____ Apollo_gist :-)_______________________________________________
| Robert FRANCHISSEUR                 Phone  : +33 (0)950  635  636 |
| 30 rue René Hamon                   Phone  : +33 (0)1 46 78 37 29 |
| F-94800 VILLEJUIF            e-mail : Robert at Franchisseur . fr |
 -------------------------------------------------------------------

Attachment: pgpfsyLHe65jZ.pgp
Description: PGP signature

Reply via email to