From: Apollon Oikonomopoulos <apoikos@debian.org>
Date: Fri, 23 Mar 2018 22:24:55 +0000 (+0200)
Subject: Set DH params location
X-Git-Tag: archive/raspbian/1%2.3.21.1+dfsg1-1+rpi1~19
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=5e84dd756341ac7d4fc5be6ecf7936c3a29945f4;p=dovecot.git

Set DH params location

Forwarded: not-needed

This is mandatory for SSL support in 2.3

Gbp-Pq: Name ssl-dh-params-location.patch
---

diff --git a/doc/example-config/conf.d/10-ssl.conf b/doc/example-config/conf.d/10-ssl.conf
index 4867a07..c4502fc 100644
--- a/doc/example-config/conf.d/10-ssl.conf
+++ b/doc/example-config/conf.d/10-ssl.conf
@@ -52,7 +52,7 @@ ssl_client_ca_dir = /etc/ssl/certs
 # Generate new params with `openssl dhparam -out /etc/dovecot/dh.pem 4096`
 # Or migrate from old ssl-parameters.dat file with the command dovecot
 # gives on startup when ssl_dh is unset.
-#ssl_dh = </etc/dovecot/dh.pem
+ssl_dh = </usr/share/dovecot/dh.pem
 
 # Minimum SSL protocol version to use. Potentially recognized values are SSLv3,
 # TLSv1, TLSv1.1, TLSv1.2 and TLSv1.3, depending on the OpenSSL version used.