you can turn off encryption to that host

On 12/16/2020 1:10 PM, Angus McIntyre wrote:
2048 bits ought to be enough, I would think. Most of the references to this problem that I was able to find suggested that it kicked in at 768 bits and smaller. So maybe it's the remote server.

The remote is e4.echonyc.com (108.60.149.50).

Where's the Diffie-Hellman key used by qmail stored on a CentOS/qmailtoaster server?

Thanks,

Angus



Eric Broch wrote on 12/16/20 2:48 PM:
hmmm.... Ours is 2048 bits.

What's the remote server?

On 12/16/2020 11:27 AM, Angus McIntyre wrote:
CentOS 8 and Qmail Toaster Ver. 1.03-3.3.1.qt.el8.

Angus



Eric Broch wrote on 12/14/20 11:50 PM:
What QMT/CentOS versions?


On 12/14/2020 6:53 PM, Angus McIntyre wrote:
My new toaster delivers mail just fine to almost all hosts. However, with one destination host I get the error:

  TLS connect failed: error:141A318A:SSL routines:tls_process_ske_dhe:
  dh key too small; connected to x.x.x.x
  I'm not going to try again ...

The question is, which host has the undersized Diffie-Hellman key? Is it my server, or the remote host?

If it's my server, how do I generate a larger DH key for qmail to use?

If it's the other server, how do I tell qmail to accept a lower level of security or no encryption at all for this particular destination?

Thanks for any advice,

Angus


---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Reply via email to