2048 bits ought to be enough, I would think. Most of the references to
this problem that I was able to find suggested that it kicked in at 768
bits and smaller. So maybe it's the remote server.
The remote is e4.echonyc.com (108.60.149.50).
Where's the Diffie-Hellman key used by qmail stored on a
CentOS/qmailtoaster server?
Thanks,
Angus
Eric Broch wrote on 12/16/20 2:48 PM:
hmmm.... Ours is 2048 bits.
What's the remote server?
On 12/16/2020 11:27 AM, Angus McIntyre wrote:
CentOS 8 and Qmail Toaster Ver. 1.03-3.3.1.qt.el8.
Angus
Eric Broch wrote on 12/14/20 11:50 PM:
What QMT/CentOS versions?
On 12/14/2020 6:53 PM, Angus McIntyre wrote:
My new toaster delivers mail just fine to almost all hosts.
However, with one destination host I get the error:
TLS connect failed: error:141A318A:SSL routines:tls_process_ske_dhe:
dh key too small; connected to x.x.x.x
I'm not going to try again ...
The question is, which host has the undersized Diffie-Hellman key?
Is it my server, or the remote host?
If it's my server, how do I generate a larger DH key for qmail to use?
If it's the other server, how do I tell qmail to accept a lower
level
of security or no encryption at all for this particular destination?
Thanks for any advice,
Angus
---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
--
https://raingod.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com