From: Martti Rannanjärvi <martti.rannanjarvi@dovecot.fi>
Date: Fri, 30 Dec 2016 08:20:32 +0000 (+0200)
Subject: doc: add ssl_dh to example-config
X-Git-Tag: 2.3.0.rc1~2291
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e667d5da10e41d20ffdb80804d522bfeb951e2d9;p=thirdparty%2Fdovecot%2Fcore.git

doc: add ssl_dh to example-config
---

diff --git a/doc/example-config/conf.d/10-ssl.conf b/doc/example-config/conf.d/10-ssl.conf
index 2cd445b392..a70cbdb4b1 100644
--- a/doc/example-config/conf.d/10-ssl.conf
+++ b/doc/example-config/conf.d/10-ssl.conf
@@ -42,6 +42,12 @@ ssl_key = </etc/ssl/private/dovecot.pem
 # auth_ssl_username_from_cert=yes.
 #ssl_cert_username_field = commonName
 
+# SSL DH parameters
+# Generate new params with `openssl dhparam -out /etc/dovecot/dh.pem 4096`
+# Or migrate from old ssl-parameters.dat file with the command dovecot
+# gives on startup when ssl_dh is unset.
+#ssl_dh = </etc/dovecot/dh.pem
+
 # DH parameters length to use.
 #ssl_dh_parameters_length = 1024