On Wed, May 18, 2011 at 11:27:14PM +0100, Mikolaj Kucharski wrote: > Hi, > > I have smtpd(8) setup on one of my machines with TLS enabled. Each time > I start /usr/sbin/smtpd (as root) I'm getting following message: > > no DH parameters found in /etc/mail/certs/re0.dh > using built-in DH parameters > > Do you know maybe why I see this? I'm getting this for last few > snapshots (IIRC). Didn't report it as though that was something > temporary which you guys are aware of and will fix soon. >
Hi Mikolaj, I CC-ed misc@ as I received this question quite a few times in the last couple days. The message you're seeing is not an error and I will try to find a way to make it more clear. smtpd is just telling you that you did not generate Diffie-Hellman parameters [see smtpd.conf(5) / starttls(8)], and that it will use its own builtin parameters. It is safe to ignore the message, but it is safer to actually take the time to generate your very own parameters. We don't do it when booting or starting smtpd for the first time because it can take a very looooooooooong time :-) Gilles -- Gilles Chehade http://www.poolp.org