Aki Tuomi
Sat, 16 Mar 2019 14:07:19 -0000

ssl_dh is required from 2.3.0-2.3.2. From 2.3.3 onwards its optional. You can
rm the ssl-parameters.dat file to get rid of that warning.





   Aki



    On 16 March 2019 12:50 sergio via dovecot <
    <a
href="mailto:dovecot@dovecot.org">dovecot@dovecot.org>
wrote:








    <a href="https://wiki.dovecot.org/SSL/DovecotConfiguration"
rel="noopener"
target="_blank">https://wiki.dovecot.org/SSL/DovecotConfiguration
says:





    "Since v2.3.3+ Diffie-Hellman parameters have been made optional, and


    you are encouraged to disable non-ECC DH algorithms completely."





    and a bit later:


    "From version 2.3, you must specify path to DH parameters file using


    ssl_dh=</path/to/dh.pem"





    So.





    1. Is ssl_dh an optional or a must?





    2. I've disabled ssl_dh in my config. Dovecot works fine except it shows


    warnings:





    doveconf: Warning: please set ssl_dh=</etc/dovecot/dh.pem


    doveconf: Warning: You can generate it with: dd ...








    I'm using dovecot version 2.3.4.1-1~bpo9+1 from debian stretch-backports





    --


    sergio.






---
Aki Tuomi