From 672791a51c1d239918562d7a0d4420ec137e6694 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Josu=C3=A9=20Tille?= Date: Thu, 22 Feb 2024 23:38:23 +0100 Subject: [PATCH] On dh file generation, remove dsaparam as it's not supported on debian bookworm --- scripts/install | 2 +- scripts/restore | 2 +- scripts/upgrade | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/scripts/install b/scripts/install index 29311e2..d3ea17c 100644 --- a/scripts/install +++ b/scripts/install @@ -126,7 +126,7 @@ ynh_script_progression --message="Creating a dh file..." --weight=3 # Make dh cert for synapse if it doesn't exist if [ ! -e /etc/ssl/private/dh2048.pem ] then - ynh_exec_warn_less openssl dhparam -out /etc/ssl/private/dh2048.pem -outform PEM -2 2048 -dsaparam + ynh_exec_warn_less openssl dhparam -out /etc/ssl/private/dh2048.pem -outform PEM -2 2048 chown root:ssl-cert /etc/ssl/private/dh2048.pem chmod 640 /etc/ssl/private/dh2048.pem fi diff --git a/scripts/restore b/scripts/restore index 347c02e..161e666 100644 --- a/scripts/restore +++ b/scripts/restore @@ -147,7 +147,7 @@ ynh_script_progression --message="Creating a dh file..." --weight=40 # Make dh cert for synapse if it doesn't exist if [ ! -e /etc/ssl/private/dh2048.pem ] then - ynh_exec_warn_less openssl dhparam -out /etc/ssl/private/dh2048.pem -outform PEM -2 2048 -dsaparam + ynh_exec_warn_less openssl dhparam -out /etc/ssl/private/dh2048.pem -outform PEM -2 2048 chown root:ssl-cert /etc/ssl/private/dh2048.pem chmod 640 /etc/ssl/private/dh2048.pem fi diff --git a/scripts/upgrade b/scripts/upgrade index 536ca48..0ef9fe3 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -308,7 +308,7 @@ if [ ! -e /etc/ssl/private/dh2048.pem ] then ynh_script_progression --message="Creating a dh file..." --weight=1 - openssl dhparam -out /etc/ssl/private/dh2048.pem -outform PEM -2 2048 -dsaparam 2> /dev/null + ynh_exec_warn_less openssl dhparam -out /etc/ssl/private/dh2048.pem -outform PEM -2 2048 chown root:ssl-cert /etc/ssl/private/dh2048.pem chmod 640 /etc/ssl/private/dh2048.pem fi