My understanding is that SendMail leverages OpenSSL for STARTTLS functionality (among other things). Does this link dynamically against whatever version of OpenSSL I have installed? Or does sendmail use/maintain its own "copy" of openssl?
I ask this because there are advanced sendmail parameters like
O CipherList=HIGH which reference openssl categories that are subject to change over time. For example, what OpenSSL considers a strong/high cipher could be different from what it considers strong later.