Re: [qmailtoaster] dh key too small

2020-12-17 Thread xaf
Angus McIntyre a écrit le 16/12/2020 à 21:10 : > 2048 bits ought to be enough, I would think. Most of the references to > this problem that I was able to find suggested that it kicked in at 768 > bits and smaller. So maybe it's the remote server. > > The remote is e4.echonyc.com (108.60.149.50).

Re: [qmailtoaster] dh key too small

2020-12-17 Thread Eric Broch
# openssl s_client -crlf -connect e4.echonyc.com:25 -starttls smtp -cert /var/qmail/control/servercert.pem |grep DH depth=3 C = GB, ST = Greater Manchester, L = Salford, O = Comodo CA Limited, CN = AAA Certificate Services verify return:1 depth=2 C = US, ST = New Jersey, L = Jersey City, O = T

Re: [qmailtoaster] dh key too small

2020-12-17 Thread Angus McIntyre
Problem solved. My crypto policies were set to DEFAULT. Changing them to LEGACY and rebooting fixed the issue. Thank you xaf and Eric. Angus xaf wrote on 12/17/20 4:07 AM: Angus McIntyre a écrit le 16/12/2020 à 21:10 : 2048 bits ought to be enough, I would think. Most of the references to th