[BlueOnyx:13501] Re: TLS message: tlsv1 alert insufficient security:s3_pkt.c:1092:SSL alert number 71

[Dirk Estenfeld]

Hello,

I solved the problem. I do not know if it is best practice but it seems to be working.
I created a new CA and a CERT (http://www.sendmail.org/~ca/email/other/cagreg.html) and replaced the certificate /usr/share/ssl/certs/sendmail.pem
I restarted sendmail and then the server was able again to receive emails from gmx and web.de.

Best regards,
Dirk

-----------------------------------------------
Black Point Arts Internet Solutions GmbH - Hanauer Landstrasse 423a - 60314 Frankfurt



-----Ursprüngliche Nachricht-----
Von: blueonyx-bounces at mail.blueonyx.it [mailto:blueonyx-bounces at mail.blueonyx.it] Im Auftrag von Dirk Estenfeld
Gesendet: Freitag, 9. August 2013 12:32
An: BlueOnyx General Mailing List
Betreff: [BlueOnyx:13499] TLS message: tlsv1 alert insufficient security:s3_pkt.c:1092:SSL alert number 71

Hello,

one of our customers have a 5106R and have the issue that he cannot receive emails from gmx any longer.
I looked at the maillog and see the error message

Aug  9 12:26:44 servername sendmail[10441]: STARTTLS=server: 10441:error:1409442F:SSL routines:SSL3_READ_BYTES:tlsv1 alert insufficient security:s3_pkt.c:1092:SSL alert number 71

How can I change tlsv1 in sendmail to a more secure version?

Best regards,
Dirk


-----------------------------------------------
Black Point Arts Internet Solutions GmbH - Hanauer Landstrasse 423a - 60314 Frankfurt



_______________________________________________
Blueonyx mailing list
Blueonyx at mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx