On Wed, Nov 17, 2021 at 05:36:43AM +0000, Claus Assmann wrote:
> On Tue, Nov 16, 2021, Andrew D. Arenson wrote:
>
> > I don't see any obvious configurations that set how email is
> > sent, so my guess is that it is being send via sendmail on my
> > Ubuntu workstation.
>
> Then you should be able to check the maillog(?) for those
> TLS problems and also check the mail queue:
> mailq
>
> Also check the DSN again: does it say which is the "reporting MTA"?
> That's most likely the one which has the TLS problem with uw.edu.
Thank you for your further guidance. mailq shows all queues empty.
Reporting-MTA is my workstation:
Reporting-MTA: dns; redsolar.uits.iu.edu
The maillog provided more detail for the error:
Oct 21 19:52:35 redsolar sm-mta[1465905]: STARTTLS=client, error: connect
failed=-1, reason=dh key too small, SSL_error=1, errno=0, retry=-1
Oct 21 19:52:35 redsolar sm-mta[1465905]: ruleset=tls_server, arg1=SOFTWARE,
relay=mxe29.s.uw.edu, reject=403 4.7.0 TLS handshake failed.
Does 'dh key too small' mean that my sendmail configuration isn't
using a big enough key, that uw.edu is ahead of the curve requiring longer keys
than most places? Or is it the other way around, that my sendmail configuration
IS using a bigger key, but uw.edu is outdated and for some reason doesn't
support it?
Andy
--
Andrew D. Arenson (he/him) H 317.964.0493
arenson (at) spatzel.net C 317.679.4669
