Changeset c9ea2dd for npl/mailserver/netqmail_conf/root/etc/postinst.d/post.qmail_conf

Timestamp:

09/10/18 15:25:59 (7 years ago)

Author:

Edwin Eefting <edwin@datux.nl>

Branches:

master, perl-5.22

Children:

4933918

Parents:

66e7a2c

Message:

fix dh2048, causing slow mail delivery when TLS is used.

File:

• npl/mailserver/netqmail_conf/root/etc/postinst.d/post.qmail_conf (modified) (1 diff)

npl/mailserver/netqmail_conf/root/etc/postinst.d/post.qmail_conf

@@ -65 +65 @@
 
 #TLS configuration
-if ! [ -e /var/qmail/control/dh1024.pem ]; then
-    openssl dhparam -out /var/qmail/control/dh1024.pem.tmp 1024 || exit 1
-    chown qmaild /var/qmail/control/dh1024.pem.tmp || exit 1
-    chmod 400 /var/qmail/control/dh1024.pem.tmp || exit 1
-    mv /var/qmail/control/dh1024.pem.tmp /var/qmail/control/dh1024.pem || exit 1
+if ! [ -e /var/qmail/control/dh2048.pem ]; then
+    openssl dhparam -out /var/qmail/control/dh2048.pem.tmp 2048 || exit 1
+    chown qmaild /var/qmail/control/dh2048.pem.tmp || exit 1
+    chmod 400 /var/qmail/control/dh2048.pem.tmp || exit 1
+    mv /var/qmail/control/dh2048.pem.tmp /var/qmail/control/dh2048.pem || exit 1
 fi
+
 
 #certificate