> > Did you (re)generate your dh.params file as noted in the Workaround section?
> 
> No, because of this text under Solution:
> "
> A change to the raise the default for sendmail client connections to
> 1024-bit DH parameters has been committed.
> "
> 
> As I understand it this would remove the need for generating
> the dh.params file?

You do not need to regenerate dh.params with the patch unless you have
specifically set DHParameters in /etc/mail/sendmail.cf to a lower
strength.  What is the output of:

grep DHParam /etc/mail/sendmail.cf

If it is set to a string beginning with '5' or a filename and that
file was generated using 512-bit strength, then remove that setting.

_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"

Reply via email to