search

mozilla / ssl-config-generator

Mozilla SSL Configuration Generator
https://ssl-config.mozilla.org/
Mozilla Public License 2.0
369 stars 60 forks source link

Dovecot 2.2.27: Unknown setting ssl_dh #59

Closed xrat closed 5 years ago

xrat commented 5 years ago

I am so sorry! When I reported issue #58 I admit I never tested the recommended setting ssl_dh = </path/to/dhparam.pem because I thought I had DH set up anyway. ssl_dh was also only introduced in Dovecot 2.3. My 2.2.x uses ssl_dh_parameters_length = 2048 instead. It causes Dovecot to automatically generate /var/lib/dovecot/ssl-parameters.dat (which BTW can take a long time where it seems Dovecot failed to come up).

april commented 5 years ago

Okay, should be all fixed now. Could you lemme know if this generated configuration works okay?

Thanks again for your help!

xrat commented 5 years ago

Thanks for your understanding. Settings generated by https://ssl-config.mozilla.org/#server=dovecot&server-version=2.2.27&config=intermediate&openssl-version=1.1.0k work fine now. Thank you!