mirror/docker-mailserver.docker-mailserver
1
0
Fork 0
mirror of https://github.com/docker-mailserver/docker-mailserver.git synced 2025-08-29 22:30:27 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

remove: Diffie-Hellman parameters for Postfix & Dovecot

Browse source 
This patch removes all custom DH parameters from DMS.

The documentation update is NOT included in this patch yet.

ref: #4538

Signed-off-by: Georg Lauterbach <44545919+georglauterbach@users.noreply.github.com>
This commit is contained in:
Georg Lauterbach 2025-08-17 12:28:33 +02:00
parent c1da4265d3
commit 8dc74bb1e8
No known key found for this signature in database
GPG key ID: D84CD4AA46D7F099
11 changed files with 2 additions and 119 deletions
Download patch file Download diff file Expand all files Collapse all files

17
target/scripts/helpers/ssl.sh
View file

@ -1,22 +1,5 @@
#!/bin/bash
function _setup_dhparam() {
local DH_SERVICE=$1
local DH_DEST=$2
local DH_CUSTOM='/tmp/docker-mailserver/dhparams.pem'
_log 'debug' "Setting up ${DH_SERVICE} dhparam"
if [[ -f ${DH_CUSTOM} ]]; then # use custom supplied dh params (assumes they're probably insecure)
_log 'trace' "${DH_SERVICE} will use custom provided DH parameters"
_log 'warn' "Using self-generated dhparams is considered insecure - unless you know what you are doing, please remove '${DH_CUSTOM}'"
cp -f "${DH_CUSTOM}" "${DH_DEST}"
else # use official standardized dh params (provided via Dockerfile)
_log 'trace' "${DH_SERVICE} will use official standardized DH parameters (ffdhe4096)."
fi
}
function _setup_ssl() {
_log 'debug' 'Setting up SSL'