Re: mysql SSL regression with OpenSSL 1.0.1p

[John Nemeth <jnemeth%cue.bc.ca@localhost>]

On Jul 14, 10:24pm, Joerg Sonnenberger wrote:
} On Tue, Jul 14, 2015 at 06:35:08PM +0200, Emmanuel Dreyfus wrote:
} > Joerg Sonnenberger <joerg%britannica.bec.de@localhost> wrote:
} > 
} > > > With recent OpenSSL upgrade, DH parameters below 1024 bits are now
} > > > refused. MySQL hardcodes 512 bits DH parameters and will therefore fail
} > > > to run SSL connexions with OpenSSL 1.0.1p
} > > Similar issues might apply to sendmail, just FYI.
} > 
} > I just gave it a try and it works fine with sendmail from pkgsrc-2015Q1
} > openssl s_client -cipher DHE-RSA-AES256-SHA -connect host:465
} 
} There was a discussion about this on the FreeBSD lists. Maybe we have a
} new enough version already.

     sendmail in pkgsrc-2015Q1 is one teeny release behind, at
8.15.1.  sendmail in pkgsrc-current is completely up to date.

}-- End of excerpt from Joerg Sonnenberger