Add EN-15:08.sendmail.

svn path=/head/; revision=46837

share/security/patches/EN-15:08/sendmail.patch

@@ -0,0 +1,24 @@
+Index: contrib/sendmail/src/tls.c
+===================================================================
+--- contrib/sendmail/src/tls.c
++++ contrib/sendmail/src/tls.c
+@@ -650,7 +650,7 @@
+ 	**  1024	generate 1024 bit parameters
+ 	**  2048	generate 2048 bit parameters
+ 	**  /file/name	read parameters from /file/name
+-	**  default is: 1024 for server, 512 for client (OK? XXX)
++	**  default is: 1024
+ 	*/
+ 
+ 	if (bitset(TLS_I_TRY_DH, req))
+@@ -676,8 +676,8 @@
+ 		}
+ 		if (dhparam == NULL)
+ 		{
+-			dhparam = srv ? "1" : "5";
+-			req |= (srv ? TLS_I_DH1024 : TLS_I_DH512);
++			dhparam = "1";
++			req |= TLS_I_DH1024;
+ 		}
+ 		else if (*dhparam == '/')
+ 		{

share/security/patches/EN-15:08/sendmail.patch.asc

@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.1.5 (FreeBSD)
+
+iQIcBAABCgAGBQJVglliAAoJEO1n7NZdz2rnAyoQAOEh0lpi5EEM5AkIOapisUzc
+Rzd74KDnoPSe7o4WED5neaVpiaf5Z+erWUtXAZ2hcuDQqJi0YRSHJB9YrQxaSI0D
+6IopQpsJqslC41Z4WKp13sGzfbANTYvmeKvrxOsz4q+YrzZpHKZYWwozjY0ZXQEK
+QjnTNM+CBTZtvp4n+Avs9pPUfOXBqk/d7KDADnOOlai3NANBG3eZnfRSGNcyONBB
+ogV8JPqDoubdwk/poNqXsu3aeWOzAAGnvtwhm7a03pxp+1iThmiGw/WRNQaADJq/
+ZDMQhtlCSpyApunesf8qw5LW1KhNU4w2hepVruakUNjHpthTmSLy5NcU8Vw1nZiw
+JB6XOT0TGoUhu7zR1uGsKRe1WlBKwSbHk5GNgU2ND4GM1RpViZ3O3dwjAXUXWlFg
+WX2LaUt/VO6YM0+Q+PlpKaHHk5c5/vzKNb0SXhPbUzLuBhdo3OID+g5s0QVjE3+E
+p34YLwqsL0+oGH7m1+ki62x9oA7PXHn4Y9ye+MSqcK40eTB16Jwx+7pFdIt7zdn8
+20i1KaBK+zEkYaMpuhKECRBUFtb3sFMnvGj7li3LaRmcubB57J8Brs4mbrZb6spo
+vkoBr2ntBPXhOeqzIa1eUgS+5DXsayjm7vn055AznzNqMe7wyA9MTEjZvMYcLAF6
+tQxxZbHkTZ7xsFDp5gaU
+=7zXU
+-----END PGP SIGNATURE-----