external/mailinabox
1
0
Förgrening 0
spegling av https://github.com/mail-in-a-box/mailinabox.git synced 2026-09-09 23:59:00 +02:00
Kod Ärenden Släpp Wiki Aktiviteter

use predefined DHE field groups

Bläddra i källkod
This commit is contained in:
KiekerJan
2021-08-01 23:09:59 +02:00
förälder dbf029b399
incheckning 1f35158211
2 ändrade filer med 17 tillägg och 6 borttagningar
Download Patch File Download Diff File Expand all files Collapse all files

10
setup/ssl.sh
Visa fil

@@ -90,9 +90,7 @@ if [ ! -f $STORAGE_ROOT/ssl/ssl_certificate.pem ]; then
ln -s $CERT $STORAGE_ROOT/ssl/ssl_certificate.pem
fi
# Generate some Diffie-Hellman cipher bits.
# openssl's default bit length for this is 1024 bits, but we'll create
# 4096 bits of bits per the latest recommendations.
if [ ! -f $STORAGE_ROOT/ssl/dh4096.pem ]; then
openssl dhparam -out $STORAGE_ROOT/ssl/dh4096.pem 4096
fi
# We no longer generate Diffie-Hellman cipher bits. Following rfc7919 we use
# a predefined finite field group, in this case ffdhe4096 from
# https://raw.githubusercontent.com/internetstandards/dhe_groups/master/ffdhe4096.pem
cp -f conf/dh4096.pem $STORAGE_ROOT/ssl/