Why uw.edu not accepted my signed email?

[Andrew D. Arenson]

On Wed, Nov 17, 2021 at 05:36:43AM +0000, Claus Assmann wrote:

> On Tue, Nov 16, 2021, Andrew D. Arenson wrote:
> 
> >       I don't see any obvious configurations that set how email is
> >       sent, so my guess is that it is being send via sendmail on my
> >       Ubuntu workstation.
> 
> Then you should be able to check the maillog(?) for those
> TLS problems and also check the mail queue:
> mailq
> 
> Also check the DSN again: does it say which is the "reporting MTA"?
> That's most likely the one which has the TLS problem with uw.edu.

  	 Thank you for your further guidance. mailq shows all queues empty. Reporting-MTA is my workstation:

	 	 Reporting-MTA: dns; redsolar.uits.iu.edu  

	 The maillog provided more detail for the error:

Oct 21 19:52:35 redsolar sm-mta[1465905]: STARTTLS=client, error: connect failed=-1, reason=dh key too small, SSL_error=1, errno=0, retry=-1
Oct 21 19:52:35 redsolar sm-mta[1465905]: ruleset=tls_server, arg1=SOFTWARE, relay=mxe29.s.uw.edu, reject=403 4.7.0 TLS handshake failed.

         Does 'dh key too small' mean that my sendmail configuration isn't using a big enough key, that uw.edu is ahead of the curve requiring longer keys than most places? Or is it the other way around, that my sendmail configuration IS using a bigger key, but uw.edu is outdated and for some reason doesn't support it?


Andy

-- 
Andrew D. Arenson (he/him)                              H 317.964.0493
arenson (at) spatzel.net                                C 317.679.4669