554 Certificate rejected over TLS. (dh key too small)

[Ozzy]

Привет, при отправке письма из моей организации в другую приходит сообщение об ошибке:

 Bounced: ipaddress, 554 Certificate rejected over TLS. (dh key too small)

У кого нибудь бывало? Как лечить?

 

[Surf_rider]

Это причина:

This issue occurs when the remote side of the conversation indicates that it wants to use TLS 1.0, but then indicates that it wants to use a cipher suite defined in the TLS 1.2 specification.

Это руководство к действию:
Вариант 1, выключаем TLS
1. Экспортируем файл конфигурации MEG:
- On the appliance, select System, System Administration, Configuration Management, Backup Configuration.
- Click Backup Configuration, then click the link to save the configuration.
- Save this configuration to a new folder.

2. Редактируем файл конфигурации emg 7.6:
- Navigate to config\Native\smtp-config.xml.
- Right-click smtp-config.xml and select Open with WordPad.

- Locate the ForbiddenCiphers section and change it to read as follows (copy and paste the following):

    <ForbiddenCiphers>
        <Attr value="aNULL" name="0"/>
        <Attr value="TLSv1.2" name="1"/>
    </ForbiddenCiphers>

Сохраняем файл.
3. Восстанавливаем файл конфигурации из бэкапа:

- Log on to the appliance manager console.
- Select System, System Administration, Configuration Management, Restore Configuration.
- Click Restore From File.
- Locate the .zip file you just created and click OK.
- Select the Values to Restore and click OK.
- Click Close.
- Click Apply Configuration Changes.
- Type a comment and click OK.

Вариант2

To enable/disable TLS 1.2 in MEG 7.6.2 and later:

- Open the appliance Dashboard.
- Select Encryption, TLS.
- Scroll down to TLS options.
- Enable or disable the Enable TLS v1.2 cipher suites option.
- Click OK.
- Apply the changes.