[FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-15:08.sendmail

[Matthew Seaman]

On 06/18/15 13:54, Royce Williams wrote:
> Did you (re)generate your dh.params file as noted in the Workaround section?

There isn't a default dh.param file.  The suggested work-around in the
EN is to generate one.

> On my systems, I had to do this to support the actual patch (not to perform
> the workaround).

Which is precisely the point.  The EN suggests either to patch sendmail
or add a dh.param file.  Either of those should work alone, but
according to reports on various mailing lists it seems only the dh.param
method works reliably (and I can personally confirm it works without
needing the sendmail patches from the EN.)

It's not clear to me if there are some special circumstances that happen
to prevent the fix in the EN working for just a few people, or if it is
a more general problem.

> You might have to restart sendmail as well, but I have not tested this.

Yes you do, with either alternative.

	Cheers,

	Matthew





-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20150618/8e3a8ca4/attachment.sig>