From 9197309b79b7eec27353a5237ae80708b869d1fb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Josu=C3=A9=20Tille?= Date: Thu, 22 Feb 2024 23:38:23 +0100 Subject: [PATCH] On dh file generation, remove dsaparam as it's not supported on debian bookworm --- scripts/install | 2 +- scripts/restore | 2 +- scripts/upgrade | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/scripts/install b/scripts/install index 8271121..e8b499c 100644 --- a/scripts/install +++ b/scripts/install @@ -207,7 +207,7 @@ ynh_script_progression --message="Creating a dh file..." --weight=3 # Make dh cert for synapse if it doesn't exist if [ ! -e /etc/ssl/private/dh2048.pem ] then - ynh_exec_warn_less openssl dhparam -out /etc/ssl/private/dh2048.pem -outform PEM -2 2048 -dsaparam + ynh_exec_warn_less openssl dhparam -out /etc/ssl/private/dh2048.pem -outform PEM -2 2048 chown root:ssl-cert /etc/ssl/private/dh2048.pem chmod 640 /etc/ssl/private/dh2048.pem fi diff --git a/scripts/restore b/scripts/restore index 8c9ddc7..4bf8634 100644 --- a/scripts/restore +++ b/scripts/restore @@ -153,7 +153,7 @@ ynh_script_progression --message="Creating a dh file..." --weight=40 # Make dh cert for synapse if it doesn't exist if [ ! -e /etc/ssl/private/dh2048.pem ] then - ynh_exec_warn_less openssl dhparam -out /etc/ssl/private/dh2048.pem -outform PEM -2 2048 -dsaparam + ynh_exec_warn_less openssl dhparam -out /etc/ssl/private/dh2048.pem -outform PEM -2 2048 chown root:ssl-cert /etc/ssl/private/dh2048.pem chmod 640 /etc/ssl/private/dh2048.pem fi diff --git a/scripts/upgrade b/scripts/upgrade index 0dee176..e21e5aa 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -504,7 +504,7 @@ if [ ! -e /etc/ssl/private/dh2048.pem ] then ynh_script_progression --message="Creating a dh file..." --weight=1 - openssl dhparam -out /etc/ssl/private/dh2048.pem -outform PEM -2 2048 -dsaparam 2> /dev/null + ynh_exec_warn_less openssl dhparam -out /etc/ssl/private/dh2048.pem -outform PEM -2 2048 chown root:ssl-cert /etc/ssl/private/dh2048.pem chmod 640 /etc/ssl/private/dh2048.pem fi