Last openssl update brakes localhost email sending

Gregory Shapiro gshapiro at gshapiro.net
Thu Jun 25 18:19:29 UTC 2015


> All of my 10.1-RELEASE-p13 systems are affected, some 20 boxes. Sendmail
> is used only for sending daily and security run outputs, but I am
> starting to feel unconfortable as it will soon be two weeks since I
> received them.
> 
> All those systems are without source code on them, and it is quite
> inconvenient for me to rebuild from source. Is binary update for this
> coming soon? Is it coming at all?

It is coming, the commit for the stable branches was last night.  The
Security and RE teams are working on the releng branches next to
produce the binary patches.

A workaround is available:

openssl dhparam -out /etc/mail/certs/dh.param 2048
cd /etc/mail/; make restart



More information about the freebsd-stable mailing list