Re: Subject: SSL_connect returned=1 errno=0 state=error: dh key too small

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Marcelo Lauxen <marcelolauxen16@xxxxxxxxx>, "openssl-users@xxxxxxxxxxx" <openssl-users@xxxxxxxxxxx>
Subject: Re: Subject: SSL_connect returned=1 errno=0 state=error: dh key too small
From: "Salz, Rich" <rsalz@xxxxxxxxxx>
Date: Thu, 29 Aug 2019 15:38:46 +0000
Accept-language: en-US
In-reply-to: <CANKisB2Gbc5Wh2hvEdF-RzeNy-tbPTtD5g28545q8u4D8bUseg@mail.gmail.com>
References: <CANKisB2Gbc5Wh2hvEdF-RzeNy-tbPTtD5g28545q8u4D8bUseg@mail.gmail.com>
User-agent: Microsoft-MacOutlook/10.1c.0.190812

We haven't control of the server who are using DH key size of 1048 bits.

In order to work with this kind of server (terribly poor security characteristics), you need to add “@SECLEVEL=0” to your OpenSSL configuration.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Follow-Ups:
- Re: Subject: SSL_connect returned=1 errno=0 state=error: dh key too small
  - From: Marcelo Lauxen

References:
- Subject: SSL_connect returned=1 errno=0 state=error: dh key too small
  - From: Marcelo Lauxen

Prev by Date: Re: Format and standard for CSR
Next by Date: Re: Format and standard for CSR
Previous by thread: Subject: SSL_connect returned=1 errno=0 state=error: dh key too small
Next by thread: Re: Subject: SSL_connect returned=1 errno=0 state=error: dh key too small
Index(es):
- Date
- Thread

[Index of Archives] [Linux ARM Kernel] [Linux ARM] [Linux Omap] [Fedora ARM] [IETF Annouce] [Security] [Bugtraq] [Linux] [Linux OMAP] [Linux MIPS] [ECOS] [Asterisk Internet PBX] [Linux API]

Powered by Linux