Date: Tue, 16 Jun 2015 12:21:17 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 200903] sendmail default configuration was broken by FreeBSD-SA-15:10.openssl Message-ID: <bug-200903-8@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200903 Bug ID: 200903 Summary: sendmail default configuration was broken by FreeBSD-SA-15:10.openssl Product: Base System Version: 10.1-RELEASE Hardware: Any OS: Any Status: New Severity: Affects Many People Priority: --- Component: conf Assignee: freebsd-bugs@FreeBSD.org Reporter: vsasjason@gmail.com I'm running default sendmail configuration just for forwarding mail for logwatch. The /etc/mail/certs/ directory doesn't contains dh.param file, so sendmail tries to use some internal default that is shorter than 768 bits, and I'm getting the following errors: > Jun 16 14:41:39 cs0 sm-msp-queue[9971]: STARTTLS=client, error: connect failed=-1, reason=dh key too small, SSL_error=1, errno=0, retry=-1 > Jun 16 14:41:39 cs0 sm-mta[9973]: STARTTLS=server, error: accept failed=0, reason=sslv3 alert handshake failure, SSL_error=1, errno=0, retry=-1, relay=localhost [127.0.0.1] > Jun 16 14:41:39 cs0 sm-msp-queue[9971]: ruleset=tls_server, arg1=SOFTWARE, relay=[127.0.0.1], reject=403 4.7.0 TLS handshake. > Jun 16 14:41:39 cs0 sm-mta[9973]: t5GBfd11009973: localhost [127.0.0.1] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 -- You are receiving this mail because: You are the assignee for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-200903-8>