Set DH params location
authorApollon Oikonomopoulos <apoikos@debian.org>
Fri, 23 Mar 2018 22:24:55 +0000 (00:24 +0200)
committerNoah Meyerhans <noahm@debian.org>
Sat, 17 Aug 2024 17:26:24 +0000 (13:26 -0400)
Forwarded: not-needed

This is mandatory for SSL support in 2.3

Gbp-Pq: Name ssl-dh-params-location.patch

doc/example-config/conf.d/10-ssl.conf

index 4867a073e732947e6456778e78c06b09417a447d..c4502fcb233694f9dd8492af15c53078e0b7697c 100644 (file)
@@ -52,7 +52,7 @@ ssl_client_ca_dir = /etc/ssl/certs
 # Generate new params with `openssl dhparam -out /etc/dovecot/dh.pem 4096`
 # Or migrate from old ssl-parameters.dat file with the command dovecot
 # gives on startup when ssl_dh is unset.
-#ssl_dh = </etc/dovecot/dh.pem
+ssl_dh = </usr/share/dovecot/dh.pem
 
 # Minimum SSL protocol version to use. Potentially recognized values are SSLv3,
 # TLSv1, TLSv1.1, TLSv1.2 and TLSv1.3, depending on the OpenSSL version used.