[BlueOnyx:13576] Re: TLS message: tlsv1 alert insufficient security:s3_pkt.c:1092:SSL alert number 71

[Tobias Gablunsky]

Well, does the fix I sent to the list, not help you?

"..

I just created a file containing diffie-hellmann parameters:

  openssl dhparam -out /etc/mail/sendmail.dh 1024

and referenced it in the /etc/mail/sendmail.mc file:

  define(`confDH_PARAMETERS',`/etc/mail/sendmail.dh')

After a rebuild of the sendmail.cf "m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf" and a restart of the sendmail daemon everything worked again!
.."

Mit freundlichen Grüßen,

Tobias Gablunsky
Servertechnik
Server Management
____________________________________________

CBXNET combox internet GmbH
Lützowstr. 106 | 10785 Berlin
Tel: +49 (30) 5900 69-41
Fax: +49 (30) 5900 69-99
www.cbxnet.de

Event Connect - Internet für Ihren Event!
Tel: +49 (30) 5900 69-80
www.event-connect.de

Amtsgericht Berlin-Charlottenburg HRB 71171
Geschäftsführer: Lutz Treutler 

 

> -----Original Message-----
> From: blueonyx-bounces at mail.blueonyx.it 
> [mailto:blueonyx-bounces at mail.blueonyx.it] On Behalf Of 
> Florian Arzberger
> Sent: Tuesday, August 20, 2013 1:07 PM
> To: 'BlueOnyx General Mailing List'
> Subject: [BlueOnyx:13575] Re: TLS message: tlsv1 alert 
> insufficient security:s3_pkt.c:1092:SSL alert number 71
> 
> > -----Ursprüngliche Nachricht-----
> > Von: blueonyx-bounces at mail.blueonyx.it [mailto:blueonyx-
> > bounces at mail.blueonyx.it] Im Auftrag von Michael Stauber
> > Gesendet: 10 August 2013 04:24
> > An: BlueOnyx General Mailing List
> > Betreff: [BlueOnyx:13508] Re: TLS message: tlsv1 alert insufficient
> > security:s3_pkt.c:1092:SSL alert number 71
> > 
> > 
> > Yeah, on older 5106R boxes these certificates might still 
> be just 1024 bit
> > instead of 2048 bit. Or the cert might have been expired.
> > 
> > Now that everyone moves on to 2048 bit (/me waves at NSA) more and
> > more places are rejecting older certificates and/or enforce stricter
> validation.
> > 
> > --
> > With best regards
> > 
> > Michael Stauber
> > _______________________________________________
> > Blueonyx mailing list
> > Blueonyx at mail.blueonyx.it
> > http://mail.blueonyx.it/mailman/listinfo/blueonyx
> 
> i still have this incredibly outdated 5102R online and right 
> now it's unable
> to receive e-mail from web.de/gmx - i really need to fix 
> this. can anyone
> help me out?
> 
> 
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx
>