Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.mail.sendmail > #8347

Re: sendmail snapshot 8.19.0.2 is available

From kalevi@kolttonen.fi (Kalevi Kolttonen)
Newsgroups comp.mail.sendmail
Subject Re: sendmail snapshot 8.19.0.2 is available
Date 2026-07-09 13:24 +0000
Organization A noiseless patient Spider
Message-ID <112o7fa$dq7b$1@dont-email.me> (permalink)
References <111qc86$tmt$1@news.misty.com> <1129fi0$3ojd0$1@dont-email.me> <1129k2a$3pps6$1@dont-email.me> <1129mju$3qaqt$1@dont-email.me> <112iabk$3pt$1@news.misty.com>

Show all headers | View raw

Claus Aßmann <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org> wrote:
> Kalevi Kolttonen wrote:
> 
>> STARTTLS=server, relay=fedora.local [192.168.1.154], version=TLSv1.3,
>> verify=OK, cipher=TLS_AES_256_GCM_SHA384, bits=256/256,
>> key_exchange=ECDHE, eku=overrode_no_client_auth
> 
> Thanks for giving this a try, sorry for not providing (better)
> documentation (yet).
> 
> Which OpenSSL version do you use?
> With 3.5ff you should get something like
> key_exchange=X25519MLKEM768
> (PQC)

root@omnios:~# openssl version -a
OpenSSL 3.6.3 9 Jun 2026 (Library: OpenSSL 3.6.3 9 Jun 2026)
built on: Thu Jun 11 23:19:59 2026 UTC
platform: solaris64-x86_64-gcc
options:  bn(64,64)
compiler: gcc -fPIC -m64 -O2 -fno-omit-frame-pointer -fno-aggressive-loop-optimizations -fstack-protector-strong -gdwarf-4 -gstrict-dwarf  -m64 -Wa,--noexecstack -Wall -O3 -DFILIO_H -DL_ENDIAN -DOPENSSL_PIC -D_REENTRANT -DOPENSSL_BUILDING_OPENSSL -DZLIB -DNDEBUG
OPENSSLDIR: "/usr/ssl"
ENGINESDIR: "/usr/lib/amd64/engines-3"
MODULESDIR: "/usr/lib/amd64/ossl-modules"
Seeding source: os-specific
CPUINFO: OPENSSL_ia32cap=0x7ffaf3ffffebffff:0x00000000029c6fbf:0x00000000bc002e00:0x0000000000000000:0x0000000000000000

root@fedora:~# $ openssl version -a
OpenSSL 3.5.7 9 Jun 2026 (Library: OpenSSL 3.5.7 9 Jun 2026)
built on: Wed Jun 10 00:00:00 2026 UTC
platform: linux-x86_64
options:  bn(64,64)
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer   -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -Wa,--noexecstack -Wa,--generate-missing-build-notes=yes -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-hardened-ld-errors -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_BUILDING_OPENSSL -DZLIB -DNDEBUG -D_GNU_SOURCE -DPURIFY -DDEVRANDOM="\\"/dev/urandom\\"" -DOPENSSL_PEDANTIC_ZEROIZATION -DREDHAT_FIPS_VENDOR="\\"Red Hat Enterprise Linux OpenSSL FIPS Provider\\"" -DREDHAT_FIPS_VERSION="\\"3.5.7-9c2719932f8ae75e\\"" -DSYSTEM_CIPHERS_FILE="/etc/crypto-policies/back-ends/opensslcnf.config"
OPENSSLDIR: "/etc/pki/tls"
ENGINESDIR: "/usr/lib64/engines-3"
MODULESDIR: "/usr/lib64/ossl-modules"
Seeding source: os-specific
CPUINFO: OPENSSL_ia32cap=0x7ed8320b078bffff:0x00400004219c91a9:0x0000000000000000:0x0000000000000000:0x0000000000000000

root@omnios:~# openssl list -tls-groups
secp256r1:secp384r1:secp521r1:x25519:x448:brainpoolP256r1tls13:brainpoolP384r1tls13:brainpoolP512r1tls13:ffdhe2048:ffdhe3072:ffdhe4096:ffdhe6144:ffdhe8192:MLKEM512:MLKEM768:MLKEM1024:SecP256r1MLKEM768:X25519MLKEM768:SecP384r1MLKEM1024

root@fedora:~# openssl list -tls-groups
secp256r1:secp384r1:secp521r1:x25519:x448:brainpoolP256r1tls13:brainpoolP384r1tls13:brainpoolP512r1tls13:ffdhe2048:ffdhe3072:ffdhe4096:ffdhe6144:ffdhe8192:MLKEM512:MLKEM768:MLKEM1024:SecP256r1MLKEM768:X25519MLKEM768:SecP384r1MLKEM1024


Using this command:

  openssl s_client -starttls smtp -connect omnios.local:25 -groups X25519MLKEM768

Server log is:

Jul  9 16:23:12 localhost sendmail[14522]: [ID 702911 mail.warning] STARTTLS=server, error: accept failed=-1, reason=no suitable key share, SSL_error=1, errno=0, retry=-1, relay=fedora.local [192.168.1.154]
Jul  9 16:23:12 localhost sendmail[14522]: [ID 702911 mail.warning] STARTTLS=server: error:0A000065:SSL routines::no suitable key share:ssl/statem/extensions.c:1412:



br,
KK

Back to comp.mail.sendmail | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

sendmail snapshot 8.19.0.2 is available Claus Aßmann <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org> - 2026-06-28 01:42 -0400
  Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-01 17:54 +0000
    Re: sendmail snapshot 8.19.0.2 is available Claus Aßmann <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org> - 2026-07-03 02:03 -0400
      Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-03 13:47 +0000
  Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-01 19:13 +0000
    Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-02 23:22 +0000
      Re: sendmail snapshot 8.19.0.2 is available Claus Aßmann <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org> - 2026-07-03 13:50 -0400
        Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-03 18:33 +0000
        Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-03 19:19 +0000
          Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-03 22:44 +0000
            Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-03 23:10 +0000
              Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-04 00:27 +0000
                Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-04 01:11 +0000
                Re: sendmail snapshot 8.19.0.2 is available Claus Aßmann <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org> - 2026-07-07 03:37 -0400
                Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-09 13:24 +0000
                Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-09 14:11 +0000
                Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-09 17:51 +0000
                Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-09 20:38 +0000
  Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-01 19:22 +0000

csiph-web