diff options
Diffstat (limited to '')
| -rw-r--r-- | debian/patches/ssl-dh-params-location.patch | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/debian/patches/ssl-dh-params-location.patch b/debian/patches/ssl-dh-params-location.patch new file mode 100644 index 0000000..10589ea --- /dev/null +++ b/debian/patches/ssl-dh-params-location.patch @@ -0,0 +1,24 @@ +From: Apollon Oikonomopoulos <apoikos@debian.org> +Date: Sat, 24 Mar 2018 00:24:55 +0200 +Subject: Set DH params location + +Forwarded: not-needed + +This is mandatory for SSL support in 2.3 +--- + doc/example-config/conf.d/10-ssl.conf | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/doc/example-config/conf.d/10-ssl.conf b/doc/example-config/conf.d/10-ssl.conf +index 4867a07..c4502fc 100644 +--- a/doc/example-config/conf.d/10-ssl.conf ++++ b/doc/example-config/conf.d/10-ssl.conf +@@ -52,7 +52,7 @@ ssl_client_ca_dir = /etc/ssl/certs + # Generate new params with `openssl dhparam -out /etc/dovecot/dh.pem 4096` + # Or migrate from old ssl-parameters.dat file with the command dovecot + # gives on startup when ssl_dh is unset. +-#ssl_dh = </etc/dovecot/dh.pem ++ssl_dh = </usr/share/dovecot/dh.pem + + # Minimum SSL protocol version to use. Potentially recognized values are SSLv3, + # TLSv1, TLSv1.1, TLSv1.2 and TLSv1.3, depending on the OpenSSL version used. |