mail/postfix: fix missing dh parameter file on 22.7

This commit is contained in:
Franco Fichtner
2022-07-14 08:22:28 +02:00
parent 31a7d5d5b3
commit 835f72cc23
3 changed files with 11 additions and 2 deletions
+1
View File
@@ -1,5 +1,6 @@
PLUGIN_NAME= postfix
PLUGIN_VERSION= 1.23
PLUGIN_REVISION= 1
PLUGIN_COMMENT= SMTP mail relay
PLUGIN_DEPENDS= postfix35
PLUGIN_MAINTAINER= m.muenz@gmail.com
@@ -0,0 +1,8 @@
-----BEGIN DH PARAMETERS-----
MIIBCAKCAQEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz
+8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a
87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7
YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi
7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD
ssbzSibBsu/6iGtCOGEoXJf//////////wIBAg==
-----END DH PARAMETERS-----
@@ -127,11 +127,11 @@ smtpd_tls_CAfile = /etc/ssl/cert.pem
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1, !TLSv1.2
{% elif OPNsense.postfix.general.tls_server_compatibility == 'intermediate' %}
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
smtpd_tls_dh1024_param_file = /usr/local/etc/dh-parameters.2048
smtpd_tls_dh1024_param_file = /usr/local/opnsense/data/OPNsense/Postfix/dh-parameters.2048.rfc7919
smtpd_tls_mandatory_ciphers = medium
{% elif OPNsense.postfix.general.tls_server_compatibility == 'old' %}
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_dh1024_param_file = /usr/local/etc/dh-parameters.2048
smtpd_tls_dh1024_param_file = /usr/local/opnsense/data/OPNsense/Postfix/dh-parameters.2048.rfc7919
smtpd_tls_mandatory_ciphers = low
{% endif %}
smtpd_tls_protocols = $smtpd_tls_mandatory_protocols