On 06/18/15 13:54, Royce Williams wrote: > Did you (re)generate your dh.params file as noted in the Workaround section?
There isn't a default dh.param file. The suggested work-around in the EN is to generate one. > On my systems, I had to do this to support the actual patch (not to perform > the workaround). Which is precisely the point. The EN suggests either to patch sendmail or add a dh.param file. Either of those should work alone, but according to reports on various mailing lists it seems only the dh.param method works reliably (and I can personally confirm it works without needing the sendmail patches from the EN.) It's not clear to me if there are some special circumstances that happen to prevent the fix in the EN working for just a few people, or if it is a more general problem. > You might have to restart sendmail as well, but I have not tested this. Yes you do, with either alternative. Cheers, Matthew
signature.asc
Description: OpenPGP digital signature