]> CyberLeo.Net >> Repos - FreeBSD/stable/9.git/commit
MFC: An additional fix for the openssl Weak DH remediation:
authorgshapiro <gshapiro@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Thu, 25 Jun 2015 01:53:45 +0000 (01:53 +0000)
committergshapiro <gshapiro@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Thu, 25 Jun 2015 01:53:45 +0000 (01:53 +0000)
commitcf9bbe4f2352b46cb0a165185c21d6d94b1fc2ad
tree2dc9b9cfdc5922492d7930288e29e107c9c207bb
parentc21339621de99f13d609bbae5f1401963726858b
MFC: An additional fix for the openssl Weak DH remediation:

     The import of openssl to address the FreeBSD-SA-15:10.openssl security
     advisory includes a change which rejects handshakes with DH parameters
     below 768 bits.  sendmail releases prior to 8.15.2 (not yet released),
     defaulted to a 512 bit DH parameter setting for client connections.

     The first fix committed last week changed the default to 1024 bits.

     This commit fixes the case where the DHParameters option is set to a
     file which doesn't exist, which is the case on newer versions of
     FreeBSD which enable STARTTLS by default by auto-creating TLS
     certificates.

git-svn-id: svn://svn.freebsd.org/base/stable/9@284788 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
contrib/sendmail/src/sendmail.h