you could also try to change the cipher list in qmail
# openssl ciphers 'MEDIUM:HIGH:!SSLv2:!MD5:!RC4:!3DES:!DH' &> myciphers
or
# openssl ciphers 'DEFAULT:!DH' &> myciphers
# cp -p /var/qmail/control/tlsserverciphers
/var/qmail/control/tlsserverciphers.bak
# cp myciphers /var/qmail/control/tlsserverciphers (preserves permissions).
Keep me apprised.
On 7/11/2024 7:29 PM, Eric Broch wrote:
Could you try setting the policy like so:
update-crypto-policies --set DEFAULT
On 7/11/2024 1:43 PM, Chris Knight wrote:
update-crypto-policies --check