doveconf: hide ssl_key and ssl_dh without -P

diff --git a/src/config/doveconf.c b/src/config/doveconf.c
index 63ae419855754630927f960f3f88222c4bdcef1f..93601583e694fa4693bf06fcfc801522d8eeb5a3 100644 (file)
--- a/src/config/doveconf.c
+++ b/src/config/doveconf.c
@@ -304,7 +304,9 @@ config_dump_human_output(struct config_dump_human_context *ctx,
                o_stream_nsend(output, key, value-key);
                o_stream_nsend_str(output, " = ");
                if (hide_passwords && value[1] != '\0' &&
-                   value-key > 9 && strncmp(value-9, "_password", 9) == 0) {
+                   ((value-key > 9 && strncmp(value-9, "_password", 9) == 0) ||
+                    strncmp(key, "ssl_key",7) == 0 ||
+                    strncmp(key, "ssl_dh",6) == 0))  {
                        o_stream_nsend_str(output, " # hidden, use -P to show it");
                } else if (!value_need_quote(value+1))
                        o_stream_nsend_str(output, value+1);