Package: sendmail-bin
Version: 8.15.2-7

Hello,

following testing after upgrading from 8.15.2-6 to 8.15.2-7,
sendmail does not accept certain incoming connections anymore
and refuses the STARTTLS handshake with "ca md too weak".

Most reproduceable way I found by now is the DANE validator at
https://dane.sys4.de/, which leave a log entry e.g.:
Dec 11 11:04:54 Redstar sm-mta[18223]: STARTTLS=server, error: accept 
failed=-1, reason=ca md too weak, SSL_error=1, errno=0, retry=-1, 
relay=dane.sys4.de [IPv6:2001:1578:400:111:0:0:3:1]

Other affected parties include e.g. amazon.

Bye,

Joerg

Attachment: signature.asc
Description: PGP signature

Reply via email to