aboutsummaryrefslogtreecommitdiffstats
path: root/sys/conf/newvers.sh
diff options
context:
space:
mode:
authorXin LI <delphij@FreeBSD.org>2015-06-18 05:36:45 +0000
committerXin LI <delphij@FreeBSD.org>2015-06-18 05:36:45 +0000
commit3cc4b903a1e368c5629f2d887255c5a57890e9d0 (patch)
tree62914b25cf84aafa5bee350c10409cd5c149a1df /sys/conf/newvers.sh
parentcc0676581f14047fe0bfb77fd7bd07ece29ac0dd (diff)
downloadsrc-3cc4b903a1e368c5629f2d887255c5a57890e9d0.tar.gz
src-3cc4b903a1e368c5629f2d887255c5a57890e9d0.zip
Raise the default for sendmail client connections to 1024-bit DH
parameters to imporve TLS/DH interoperability with newer SSL/TLS suite, notably OpenSSL after FreeBSD 10.1-RELEASE-p12 (FreeBSD- SA-15:10.openssl). This is MFC of r284436 (gshapiro), the original commit message was: === The import of openssl to address the FreeBSD-SA-15:10.openssl security advisory includes a change which rejects handshakes with DH parameters below 768 bits. sendmail releases prior to 8.15.2 (not yet released), defaulted to a 512 bit DH parameter setting for client connections. This commit chages that default to 1024 bits. sendmail 8.15.2, when released well use a default of 2048 bits. === Reported by: Frank Seltzer Errata Notice: FreeBSD-EN-15:08.sendmail Approved by: so
Notes
Notes: svn path=/releng/9.3/; revision=284536
Diffstat (limited to 'sys/conf/newvers.sh')
-rw-r--r--sys/conf/newvers.sh2
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/conf/newvers.sh b/sys/conf/newvers.sh
index 7561a45f6298..4c4debea728a 100644
--- a/sys/conf/newvers.sh
+++ b/sys/conf/newvers.sh
@@ -32,7 +32,7 @@
TYPE="FreeBSD"
REVISION="9.3"
-BRANCH="RELEASE-p16"
+BRANCH="RELEASE-p17"
if [ "X${BRANCH_OVERRIDE}" != "X" ]; then
BRANCH=${BRANCH_OVERRIDE}
fi