Bug#913054: marked as done ([kmail] error:141A318A:SSL routines:tls_process_ske_dhe:dh key too small)
Your message dated Wed, 11 Dec 2019 12:15:40 +0100
with message-id <9553856.hchjXE02Jx@hipnos>
and subject line Re: [kmail] error:141A318A:SSL routines:tls_process_ske_dhe:dh key too small
has caused the Debian Bug report #913054,
regarding [kmail] error:141A318A:SSL routines:tls_process_ske_dhe:dh key too small
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
913054: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=913054
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: submit@bugs.debian.org
- Subject: [kmail] error:141A318A:SSL routines:tls_process_ske_dhe:dh key too small
- From: MAG4 Piemonte <mag4@aruba.it>
- Date: Tue, 06 Nov 2018 13:42:00 +0100
- Message-id: <10418601.Cn6f17kxHf@hipnos>
Package: kmail
Version: 4:18.08.1-1
Severity: important
--- Please enter the report below this line. ---
Dear maintainer, after upgrading openssl to version 1.1.1 kmail is unable to
sent messages with error
Failed to transport message. Error during SSL handshake: error:141A318A:SSL
routines:tls_process_ske_dhe:dh key too small
Downgrading openssl to version 1.1.0h-4 workaround the problem ...
Maybe the error is related to bugs
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907015
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907118
Regards!
Guido
--- System information. ---
Architecture:
Kernel: Linux 4.18.0-2-amd64
Debian Release: buster/sid
500 testing ftp.it.debian.org
500 stable download.webmin.com
--- Package information. ---
Depends (Version) | Installed
=================================================================-+-
==================================
akonadi-server (>= 4:17.08~) |
4:18.08.1-1+b1
kdepim-runtime (>= 4:17.08~) |
4:18.08.1-1
libkf5akonadisearch-bin (>= 4:17.08~) |
4:18.08.1-1+b1
libkf5akonadisearch-plugins (>= 4:17.08~) |
4:18.08.1-1+b1
libkf5grantleetheme-plugins (>= 17.08~) | 18.08.1-1
kio | 5.49.0-1
libc6 (>= 2.14) | 2.27-8
libgcc1 (>= 1:3.0) | 1:8.2.0-9
libgpgmepp6 (>= 1.11.1) | 1.12.0-4
libkf5akonadiagentbase5 (>= 4:18.07.90) |
4:18.08.1-1+b1
libkf5akonadicontact5 (>= 4:17.12.2) |
4:18.08.1-1
libkf5akonadicore5abi2 (>= 4:18.07.90) |
4:18.08.1-1+b1
libkf5akonadimime5 (>= 4:17.12.2) |
4:18.08.1-2
libkf5akonadisearchdebug5 (>= 4:17.12.2) |
4:18.08.1-1+b1
libkf5akonadisearchpim5 (>= 4:16.08.0) |
4:18.08.1-1+b1
libkf5akonadiwidgets5abi1 (>= 4:17.12.1) |
4:18.08.1-1+b1
libkf5bookmarks5 (>= 4.96.0) | 5.49.0-1
libkf5calendarcore5abi2 (>= 4:18.07.90) |
4:18.08.1-1
libkf5calendarutils5 (>= 4:17.12.2) |
4:18.08.1-1
libkf5codecs5 (>= 5.4.0+git20141202.0008+15.04) | 5.49.0-1
libkf5completion5 (>= 4.97.0) | 5.49.0-1
libkf5configcore5 (>= 4.98.0) | 5.49.0-1
libkf5configgui5 (>= 4.97.0) | 5.49.0-1
libkf5configwidgets5 (>= 5.23.0) | 5.49.0-1
libkf5contacts5 (>= 4:15.12.0) |
4:18.08.1-1
libkf5coreaddons5 (>= 5.2.0) | 5.49.0-1
libkf5crash5 (>= 5.15.0) | 5.49.0-1
libkf5dbusaddons5 (>= 4.97.0) | 5.49.0-1
libkf5followupreminder5 (>= 4:16.04.0) |
4:18.08.1-1
libkf5gravatar5abi2 (>= 4:18.07.90) |
4:18.08.1-1
libkf5guiaddons5 (>= 4.96.0) | 5.49.0-1
libkf5i18n5 (>= 4.97.0) | 5.49.0-1
libkf5iconthemes5 (>= 5.0.0) | 5.49.0-1
libkf5identitymanagement5 (>= 17.12.2) | 18.08.1-1
libkf5itemmodels5 (>= 4.96.0) | 5.49.0-1
libkf5itemviews5 (>= 4.96.0) | 5.49.0-1
libkf5jobwidgets5 (>= 4.96.0) | 5.49.0-1
libkf5kcmutils5 (>= 5.2.0+git20141003) | 5.49.0-1
libkf5kiocore5 (>= 4.96.0) | 5.49.0-1
libkf5kiofilewidgets5 (>= 4.96.0) | 5.49.0-1
libkf5kiowidgets5 (>= 5.35.0) | 5.49.0-1
libkf5kontactinterface5 (>= 17.12.2) | 18.08.1-1
libkf5ksieveui5 (>= 4:17.12.2) |
4:18.08.1-1
libkf5libkdepim-plugins |
4:18.08.1-1
libkf5libkdepim5 (>= 4:16.04.0) |
4:18.08.1-1
libkf5libkdepimakonadi5 (>= 4:17.12.2) |
4:18.08.1-1
libkf5libkleo5 (>= 4:17.08.0) |
4:18.08.1-1
libkf5mailcommon5abi2 (>= 4:18.07.90) |
4:18.08.1-1
libkf5mailtransport5 (>= 17.12.2) | 18.08.1-2
libkf5mailtransportakonadi5 (>= 17.12.2) | 18.08.1-2
libkf5messagecomposer5abi1 (>= 4:18.07.90) |
4:18.08.1-1
libkf5messagecore5abi1 (>= 4:18.07.90) |
4:18.08.1-1
libkf5messagelist5abi1 (>= 4:18.07.90) |
4:18.08.1-1
libkf5messageviewer5abi1 (>= 4:18.07.90) |
4:18.08.1-1
libkf5mime5abi1 (>= 17.12.1) | 18.08.1-1
libkf5mimetreeparser5abi1 (>= 4:18.07.90) |
4:18.08.1-1
libkf5notifications5 (>= 4.96.0) | 5.49.0-1
libkf5notifyconfig5 (>= 4.96.0) | 5.49.0-1
libkf5parts5 (>= 4.96.0) | 5.49.0-1
libkf5pimcommon5abi2 (>= 4:18.07.90) |
4:18.08.1-1
libkf5pimcommonakonadi5abi1 (>= 4:18.07.90) |
4:18.08.1-1
libkf5pimtextedit5abi2 (>= 18.07.90) | 18.08.1-1
libkf5sendlater5 (>= 4:16.04.0) |
4:18.08.1-1
libkf5service-bin | 5.49.0-1
libkf5service5 (>= 4.96.0) | 5.49.0-1
libkf5sonnetui5 (>= 5.41.0) | 5.49.0-1
libkf5templateparser5 (>= 4:17.12.2) |
4:18.08.1-1
libkf5textwidgets5 (>= 5.0.0) | 5.49.0-1
libkf5tnef5 (>= 4:15.07.90) |
4:18.08.1-1
libkf5wallet-bin | 5.49.0-1
libkf5wallet5 (>= 4.96.0) | 5.49.0-1
libkf5webengineviewer5abi1 (>= 4:18.07.90) |
4:18.08.1-1
libkf5widgetsaddons5 (>= 5.4.0+git20141119.0013+15.04) | 5.49.0-1
libkf5windowsystem5 (>= 4.100.0) | 5.49.0-1
libkf5xmlgui5 (>= 4.98.0) |
5.49.0-1+b1
libqgpgme7 (>= 1.11.1) | 1.12.0-4
libqt5core5a (>= 5.11.0~rc1) |
5.11.2+dfsg-4
libqt5dbus5 (>= 5.9.0~) |
5.11.2+dfsg-4
libqt5gui5 (>= 5.9.0~) |
5.11.2+dfsg-4
libqt5network5 (>= 5.9.0~) |
5.11.2+dfsg-4
libqt5widgets5 (>= 5.11.0~rc1) |
5.11.2+dfsg-4
libqt5xml5 (>= 5.9.0~) |
5.11.2+dfsg-4
libstdc++6 (>= 4.1.1) | 8.2.0-9
accountwizard | 4:18.08.1-1
gnupg | 2.2.10-3
kdepim-addons | 18.08.1-1
kdepim-themeeditors | 4:18.08.1-1
mbox-importer | 4:18.08.1-1
pim-data-exporter | 4:18.08.1-1
pim-sieve-editor | 4:18.08.1-1
pinentry-qt | 1.1.0-1+b1
OR pinentry-x11 |
clamav |
kaddressbook | 4:18.08.1-1
kleopatra | 4:18.08.1-1
procmail |
spamassassin |
OR bogofilter |
OR spambayes (>= 1.0.4-6) |
OR bsfilter |
OR crm114 |
--- End Message ---
--- Begin Message ---
Upgrading to version 4:19.08.3-1 the error is now restricted to only one email
provider, that continue to use SHA1 algorithm. Waiting their upgrade we
workaround setting in /etc/ssl/openssl.cnf the seclevel to 1:
[system_default_sect]
MinProtocol = TLSv1.2
CipherString = DEFAULT@SECLEVEL=1
So we can finally close the bug ...
Regards!
Guido
--- End Message ---
Reply to: