The import of openssl to address the FreeBSD-SA-15:10.openssl security
authorGregory Neil Shapiro <gshapiro@FreeBSD.org>
Tue, 16 Jun 2015 02:58:50 +0000 (02:58 +0000)
committerGregory Neil Shapiro <gshapiro@FreeBSD.org>
Tue, 16 Jun 2015 02:58:50 +0000 (02:58 +0000)
commitd815a37dda60233738e9d7876f9e24fe89181c9e
tree5d93c8421068cc58fc3b0d63e3143a6bfeed2e94
parentccc785556c58369c768fe6b6ca955f6d65d3dfb0
The import of openssl to address the FreeBSD-SA-15:10.openssl security
advisory includes a change which rejects handshakes with DH parameters
below 768 bits.  sendmail releases prior to 8.15.2 (not yet released),
defaulted to a 512 bit DH parameter setting for client connections.
This commit chages that default to 1024 bits.  sendmail 8.15.2, when
released well use a default of 2048 bits.

MFC after: 1 day
contrib/sendmail/src/tls.c