Infrastructure | TLS configuration problem on smtp.gnome.org: "dh key too small" (#189)

[Bjørn Mork <gitlab-issues gnome org>]

Title: GitLab

Bjørn Mork created an issue:

This causes mail delivery problems with modern TLS clients. The issue is easy to reproduce with openssl 1.1:

bjorn@canardo:~$ openssl s_client -connect smtp.gnome.org:25 -starttls smtp -quiet depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3 verify return:1 depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 verify return:1 depth=0 CN = gnome.org verify return:1 140507914929280:error:141A318A:SSL routines:tls_process_ske_dhe:dh key too small:../ssl/statem/statem_clnt.c:2150:

—
Reply to this email directly or view it on GitLab.
You're receiving this email because of your account on gitlab.gnome.org. If you'd like to receive fewer emails, you can unsubscribe from this thread or adjust your notification settings.