Am 02.06.21 um 11:15 schrieb Heiko Schlittermann via Exim-users:
PROBLEM 1 "the missing logline" :? **SOLVED**
it's not DHE related.
>> Problem 2:
>>
>> This may be strong evidence for the policy change: TLS session:
>> (SSL_connect): error:141A318A:SSL routines:tls_process_ske_dhe:dh key too
>> small
> I think, this isn't related to Exim directly, as we do not require
> special key sizes in the default configuration. So maybe library
> defaults changed?
It the systems crypto policy that changed so openssl refused to connect.
This was fixed by relax the crypto-policy back to Fedora 32 .
I will continue with Fedora on this topic.
Best regards,
Marius
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
PROBLEM 1 "the missing logline" :? **SOLVED**
it's not DHE related.
>> Problem 2:
>>
>> This may be strong evidence for the policy change: TLS session:
>> (SSL_connect): error:141A318A:SSL routines:tls_process_ske_dhe:dh key too
>> small
> I think, this isn't related to Exim directly, as we do not require
> special key sizes in the default configuration. So maybe library
> defaults changed?
It the systems crypto policy that changed so openssl refused to connect.
This was fixed by relax the crypto-policy back to Fedora 32 .
I will continue with Fedora on this topic.
Best regards,
Marius
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/