Re: [qmailtoaster] dh key too small

2020-12-17 Thread Angus McIntyre
Problem solved. My crypto policies were set to DEFAULT. Changing them to LEGACY and rebooting fixed the issue. Thank you xaf and Eric. Angus xaf wrote on 12/17/20 4:07 AM: Angus McIntyre a écrit le 16/12/2020 à 21:10 : 2048 bits ought to be enough, I would think. Most of the references to

Re: [qmailtoaster] dh key too small

2020-12-17 Thread Eric Broch
# openssl s_client -crlf -connect e4.echonyc.com:25 -starttls smtp -cert /var/qmail/control/servercert.pem |grep DH depth=3 C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services verify return:1 depth=2 C = US, ST = New Jersey, L = Jersey City, O =

Re: [qmailtoaster] dh key too small

2020-12-17 Thread xaf
Angus McIntyre a écrit le 16/12/2020 à 21:10 : > 2048 bits ought to be enough, I would think. Most of the references to > this problem that I was able to find suggested that it kicked in at 768 > bits and smaller. So maybe it's the remote server. > > The remote is e4.echonyc.com (108.60.149.50).

Re: [qmailtoaster] dh key too small

2020-12-16 Thread Eric Broch
you can turn off encryption to that host On 12/16/2020 1:10 PM, Angus McIntyre wrote: 2048 bits ought to be enough, I would think. Most of the references to this problem that I was able to find suggested that it kicked in at 768 bits and smaller. So maybe it's the remote server. The remote 

Re: [qmailtoaster] dh key too small

2020-12-16 Thread Eric Broch
/var/qmail/control/dh2048.pem On 12/16/2020 1:10 PM, Angus McIntyre wrote: 2048 bits ought to be enough, I would think. Most of the references to this problem that I was able to find suggested that it kicked in at 768 bits and smaller. So maybe it's the remote server. The remote is 

Re: [qmailtoaster] dh key too small

2020-12-16 Thread Angus McIntyre
2048 bits ought to be enough, I would think. Most of the references to this problem that I was able to find suggested that it kicked in at 768 bits and smaller. So maybe it's the remote server. The remote is e4.echonyc.com (108.60.149.50). Where's the Diffie-Hellman key used by qmail stored

Re: [qmailtoaster] dh key too small

2020-12-16 Thread Eric Broch
hmmm Ours is 2048 bits. What's the remote server? On 12/16/2020 11:27 AM, Angus McIntyre wrote: CentOS 8 and Qmail Toaster Ver. 1.03-3.3.1.qt.el8. Angus Eric Broch wrote on 12/14/20 11:50 PM: What QMT/CentOS versions? On 12/14/2020 6:53 PM, Angus McIntyre wrote: My new toaster

Re: [qmailtoaster] dh key too small

2020-12-16 Thread Angus McIntyre
CentOS 8 and Qmail Toaster Ver. 1.03-3.3.1.qt.el8. Angus Eric Broch wrote on 12/14/20 11:50 PM: What QMT/CentOS versions? On 12/14/2020 6:53 PM, Angus McIntyre wrote: My new toaster delivers mail just fine to almost all hosts. However, with one destination host I get the error:   TLS 

Re: [qmailtoaster] dh key too small

2020-12-14 Thread Eric Broch
What QMT/CentOS versions? On 12/14/2020 6:53 PM, Angus McIntyre wrote: My new toaster delivers mail just fine to almost all hosts. However, with one destination host I get the error:   TLS connect failed: error:141A318A:SSL routines:tls_process_ske_dhe:   dh key too small; connected to

[qmailtoaster] dh key too small

2020-12-14 Thread Angus McIntyre
My new toaster delivers mail just fine to almost all hosts. However, with one destination host I get the error: TLS connect failed: error:141A318A:SSL routines:tls_process_ske_dhe: dh key too small; connected to x.x.x.x I'm not going to try again ... The question is, which host has the