From: Ralf Jung <post@ralfj.de>
Date: Wed, 12 Jun 2019 17:11:47 +0000 (+0200)
Subject: adjust dovecot config for Dovecot 2.3
X-Git-Url: https://git.ralfj.de/ansible.git/commitdiff_plain/e7d530c5d09efc549a456ef66fea8f357d1d8511?ds=sidebyside

adjust dovecot config for Dovecot 2.3
---

diff --git a/roles/email/templates/dovecot/conf.d/10-ssl.conf b/roles/email/templates/dovecot/conf.d/10-ssl.conf
index 066f372..70df7c5 100644
--- a/roles/email/templates/dovecot/conf.d/10-ssl.conf
+++ b/roles/email/templates/dovecot/conf.d/10-ssl.conf
@@ -42,11 +42,8 @@ ssl_key = </etc/ssl/private/letsencrypt/live.key
 # auth_ssl_username_from_cert=yes.
 #ssl_cert_username_field = commonName
 
-# DH parameters length to use.
-ssl_dh_parameters_length = 2048
-
-# SSL protocols to use
-ssl_protocols = !SSLv3
+# DH parameters to use
+ssl_dh=</etc/ssl/dh2048.pem
 
 # SSL ciphers to use
 ssl_cipher_list = ALL:!EXPORT:!LOW:!MEDIUM:!kRSA:!kDH:!kECDH:!3DES