[Bug 200903] sendmail default configuration was broken by FreeBSD-SA-15:10.openssl

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200903

            Bug ID: 200903
           Summary: sendmail default configuration was broken by
                    FreeBSD-SA-15:10.openssl
           Product: Base System
           Version: 10.1-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: conf
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: vsasjason at gmail.com

I'm running default sendmail configuration just for forwarding mail for
logwatch. The /etc/mail/certs/ directory doesn't contains dh.param file, so
sendmail tries to use some internal default that is shorter than 768 bits, and
I'm getting the following errors:

> Jun 16 14:41:39 cs0 sm-msp-queue[9971]: STARTTLS=client, error: connect failed=-1, reason=dh key too small, SSL_error=1, errno=0, retry=-1
> Jun 16 14:41:39 cs0 sm-mta[9973]: STARTTLS=server, error: accept failed=0, reason=sslv3 alert handshake failure, SSL_error=1, errno=0, retry=-1, relay=localhost [127.0.0.1]
> Jun 16 14:41:39 cs0 sm-msp-queue[9971]: ruleset=tls_server, arg1=SOFTWARE, relay=[127.0.0.1], reject=403 4.7.0 TLS handshake.
> Jun 16 14:41:39 cs0 sm-mta[9973]: t5GBfd11009973: localhost [127.0.0.1] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0

-- 
You are receiving this mail because:
You are the assignee for the bug.