Re: getmail and weakdh.org ssl issue
Charles Cazabon <[email protected]>
| Newsgroups | gmane.mail.getmail.user |
|---|---|
| Message-ID | <[email protected]> |
Stefan U. Hegner <[email protected]> wrote: > > after updating my machine to debian buster, I realized that I have an > weakdh issue with getmail. [...] > I did update my openssl dhparams.pem; however when fetching mail I still > get an error: [...] > getmailrc-xxx: socket error ([SSL: DH_KEY_TOO_SMALL] dh key too > small (_ssl.c:727)) I'm not positive but I think this is complaining about the server's key/certificate. Are you specifying a client certificate in your config, or a custom certificate chain for verification? Can you run an SSL certificate verification/info tool against the server's certificate to dump it? Charles -- ----------------------------------------------------------------------- Charles Cazabon GPL'ed software available at: http://pyropus.ca/software/ -----------------------------------------------------------------------