From owner-freebsd-questions@FreeBSD.ORG  Mon Jun 22 18:28:21 2015
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@nevdull.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 95405D9B
 for <freebsd-questions@nevdull.freebsd.org>;
 Mon, 22 Jun 2015 18:28:21 +0000 (UTC)
 (envelope-from chrisstankevitz@gmail.com)
Received: from mail-lb0-x22c.google.com (mail-lb0-x22c.google.com
 [IPv6:2a00:1450:4010:c04::22c])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 360AC1BC
 for <freebsd-questions@freebsd.org>; Mon, 22 Jun 2015 18:28:21 +0000 (UTC)
 (envelope-from chrisstankevitz@gmail.com)
Received: by lbbpo10 with SMTP id po10so14555594lbb.3
 for <freebsd-questions@freebsd.org>; Mon, 22 Jun 2015 11:28:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:in-reply-to:references:date:message-id:subject:from:to
 :cc:content-type;
 bh=JHm3nkAtACxYlht03ER15NHUVOl5RGTbpaTuCeePIS4=;
 b=AI4tEt4K08j4os1GKK7a/xW1+0qWtSEJUGcgWQ0cERQJyWmsUCy+HB7ZC9UF3Jma45
 fuE34gQH+qbSr8jsldBJXuunatnXKjwoDZT/cxQxMggXyQf9ATsO52LOuJUnmFsM6sv3
 cfA4vxXAwlkpDfiVPA0e8iSzj9wBAjmo9tOrYQjBCoIgOH1xBNbp9qMk01opuykQWpRy
 3b0m44eBIFBDU2nUabfBU1UpwLRMdWJ2A+9egqrAOf9ti5fmYdOVpJdBsx3GJm7gi1qC
 tlJgd7WugUw551uMTVhzRRNBfxN0qz53D27HAZMBRm7UHfUUIz5OpVpoRHnp5IV29wiz
 Tq7g==
MIME-Version: 1.0
X-Received: by 10.112.219.70 with SMTP id pm6mr30720772lbc.41.1434997699434;
 Mon, 22 Jun 2015 11:28:19 -0700 (PDT)
Received: by 10.25.42.146 with HTTP; Mon, 22 Jun 2015 11:28:19 -0700 (PDT)
In-Reply-To: <55884952.8060005@mantis.biz>
References: <CAPi0pssr54hRtvaQ9G=XNm5OUMO6pwaMmLRMR_vBSJx4qJS5qg@mail.gmail.com>
 <55884952.8060005@mantis.biz>
Date: Mon, 22 Jun 2015 11:28:19 -0700
Message-ID: <CAPi0pss+t5roZ_g7KyJA-bm8cAezYpHfF8GLMibDFK01Ji6Urw@mail.gmail.com>
Subject: Re: 10.1-RELEASE-p12 broke sendmail. 10.1-RELEASE-p13 didn't fix
 sendmail.
From: Chris Stankevitz <chrisstankevitz@gmail.com>
To: "Chuck @ Mantis" <chuck@mantis.biz>
Cc: freebsd-questions <freebsd-questions@freebsd.org>
Content-Type: text/plain; charset=UTF-8
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Jun 2015 18:28:21 -0000

On Mon, Jun 22, 2015 at 10:43 AM, Chuck @ Mantis <chuck@mantis.biz> wrote:
> On 6/22/2015 12:17 PM, Chris Stankevitz wrote:
>> freebsd-update succeeded.  I am now at 10.1-RELEASE-p13.  But I still
>> have the same problem (sendmail reports DH key too small).  I did not
>> reboot my machine (and it will be a pain for me to do so).  Perhaps I
>> should try the workaround?  Perhaps I must reboot.
>
> I've been dealing with this issue as well.
>
>     cd /etc/mail/certs
>
>     openssl dhparam -out dh.param 2048
>
>     service sendmail restart

That worked, thank you.  If anyone can give me a hint as to why the
upgrading to 10.1-RELEASE-p13 apparently did not do this, please let
me know.

Chris