From 17272f5489d2f26fe1def87cba7b300b95d55399 Mon Sep 17 00:00:00 2001 From: Steve Hay Date: Sat, 17 Sep 2022 11:17:38 -0400 Subject: [PATCH] After merge, updated dovecot back to using ffdhe4096.pem --- setup/mail-dovecot.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/setup/mail-dovecot.sh b/setup/mail-dovecot.sh index 05307ec7..79e6f7cd 100755 --- a/setup/mail-dovecot.sh +++ b/setup/mail-dovecot.sh @@ -87,8 +87,8 @@ tools/editconf.py /etc/dovecot/conf.d/10-ssl.conf \ "ssl_min_protocol=TLSv1.2" \ "ssl_cipher_list=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384" \ "ssl_prefer_server_ciphers=no" \ - "ssl_dh_parameters_length=2048" \ - "ssl_dh=<$STORAGE_ROOT/ssl/dh2048.pem" + "ssl_dh_parameters_length=4096" \ + "ssl_dh=<$STORAGE_ROOT/ssl/ffdhe4096.pem" # Disable in-the-clear IMAP/POP because there is no reason for a user to transmit # login credentials outside of an encrypted connection. Only the over-TLS versions