Re: [swinog] openssl 1.1.1c and too short DH key on @bluewin.ch

2019-07-17 Diskussionsfäden Klaus Ethgen
Hi Woody, Am Mi den 17. Jul 2019 um 9:11 schrieb Benoît Panizzon: > If you also noticed emails not being delivered anymore to @bluewin > after uprading to Debian Buster or and other system with newer openSSL > libraries. > > This is due to new versions of openSSL not accepting DH keys shorter >

[swinog] openssl 1.1.1c and too short DH key on @bluewin.ch

2019-07-17 Diskussionsfäden Benoît Panizzon
Hi List If you also noticed emails not being delivered anymore to @bluewin after uprading to Debian Buster or and other system with newer openSSL libraries. This is due to new versions of openSSL not accepting DH keys shorter than 1024 to counter the logjam attack. Unfortunately the keys