tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: mysql SSL regression with OpenSSL 1.0.1p

On Tue, Jul 14, 2015 at 06:35:08PM +0200, Emmanuel Dreyfus wrote:
> Joerg Sonnenberger <> wrote:
> > > With recent OpenSSL upgrade, DH parameters below 1024 bits are now
> > > refused. MySQL hardcodes 512 bits DH parameters and will therefore fail
> > > to run SSL connexions with OpenSSL 1.0.1p
> > Similar issues might apply to sendmail, just FYI.
> I just gave it a try and it works fine with sendmail from pkgsrc-2015Q1
> openssl s_client -cipher DHE-RSA-AES256-SHA -connect host:465

There was a discussion about this on the FreeBSD lists. Maybe we have a
new enough version already.


Home | Main Index | Thread Index | Old Index