Changeset c9ea2dd for npl/mailserver/netqmail_conf/root

Timestamp:

09/10/18 15:25:59 (7 years ago)

Author:

Edwin Eefting <edwin@datux.nl>

Branches:

master, perl-5.22

Children:

4933918

Parents:

66e7a2c

Message:

fix dh2048, causing slow mail delivery when TLS is used.

Location:

npl/mailserver/netqmail_conf/root

Files:

• etc/postinst.d/post.qmail_conf (modified) (1 diff)
• home/system/qmail/control/qmqpservers (moved) (moved from npl/mailserver/netqmail_conf/root/home/system/qmail/control/qmqpservers.new)
• var/qmail/supervise/qmail-smtpd/run (modified) (1 diff)

npl/mailserver/netqmail_conf/root/etc/postinst.d/post.qmail_conf

@@ -65 +65 @@
 
 #TLS configuration
-if ! [ -e /var/qmail/control/dh1024.pem ]; then
-    openssl dhparam -out /var/qmail/control/dh1024.pem.tmp 1024 || exit 1
-    chown qmaild /var/qmail/control/dh1024.pem.tmp || exit 1
-    chmod 400 /var/qmail/control/dh1024.pem.tmp || exit 1
-    mv /var/qmail/control/dh1024.pem.tmp /var/qmail/control/dh1024.pem || exit 1
+if ! [ -e /var/qmail/control/dh2048.pem ]; then
+    openssl dhparam -out /var/qmail/control/dh2048.pem.tmp 2048 || exit 1
+    chown qmaild /var/qmail/control/dh2048.pem.tmp || exit 1
+    chmod 400 /var/qmail/control/dh2048.pem.tmp || exit 1
+    mv /var/qmail/control/dh2048.pem.tmp /var/qmail/control/dh2048.pem || exit 1
 fi
+
 
 #certificate

npl/mailserver/netqmail_conf/root/var/qmail/supervise/qmail-smtpd/run

@@ -28 +28 @@
 
 # This enables greetdelay for qmail-smtpd
-export SMTPD_GREETDELAY=20
+export SMTPD_GREETDELAY=5
 export DROP_PRE_GREET=1