Bug#467136: Bug#348046: TLS error occurs on Sarge too

[Marc Haber]

On Sat, Feb 23, 2008 at 11:10:27AM +0000, Ronny Adsetts wrote:
> Marc Haber said at 23/02/2008 10:18:
> >On Mon, Oct 16, 2006 at 10:32:26AM +0100, Ronny Adsetts wrote:
> >>This error is occurring with 4.50-8sarge2 on Sarge too. Judging by my
> >>munin graphs on both sending and receiving side, there's no entropy on
> >>the sending side. I noticed this error yesterday when there was
> >>testing on a client's site that resulted in a couple of hundred emails
> >>being sent to us in rapid succession.
> >
> >Do you still see this on etch or lenny?
> 
> I've not yet upgraded the two mail servers in question to etch,

It would be a good idea to do so, I won't do any more debugging on
sarge.

> /var/log/exim4/mainlog.8.gz:2008-02-15 17:00:43 1JQ24M-0005wR-EX TLS error 
> on connection to mailgate.mylor.com [80.176.71.10] (gnutls_handshake): The 
> Diffie Hellman prime sent by the server is not acceptable (not long enough).

That looks like an issue on the remote side.

> Whilst the error message above is not exactly the same as in my original 
> report, it's close enough that it *may* be the same error with a more 
> specific error message.

nack.

> Thanks for your continued hard work on the exim package. :-).

You're welcome.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 3221 2323190