[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: mysql SSL regression with OpenSSL 1.0.1p
On Jul 14, 10:24pm, Joerg Sonnenberger wrote:
} On Tue, Jul 14, 2015 at 06:35:08PM +0200, Emmanuel Dreyfus wrote:
} > Joerg Sonnenberger <joerg%britannica.bec.de@localhost> wrote:
} > > > With recent OpenSSL upgrade, DH parameters below 1024 bits are now
} > > > refused. MySQL hardcodes 512 bits DH parameters and will therefore fail
} > > > to run SSL connexions with OpenSSL 1.0.1p
} > > Similar issues might apply to sendmail, just FYI.
} > I just gave it a try and it works fine with sendmail from pkgsrc-2015Q1
} > openssl s_client -cipher DHE-RSA-AES256-SHA -connect host:465
} There was a discussion about this on the FreeBSD lists. Maybe we have a
} new enough version already.
sendmail in pkgsrc-2015Q1 is one teeny release behind, at
8.15.1. sendmail in pkgsrc-current is completely up to date.
}-- End of excerpt from Joerg Sonnenberger
Main Index |
Thread Index |