Univention Bugzilla – Bug 39158
move DH parameters into common package
Last modified: 2019-01-03 07:18:47 CET
+++ This bug was initially created as a clone of Bug #37459 +++ At least univention-ldap and univention-mail-postfix (apache?) use their own DH parameters files and maintain scripts for them. This could be moved into a common package like univention-ssl.
Good idea. univention-apache doesn't currently use it (SSLOpenSSLConfCmd DHParameters directive missing in apache < 2.4.8. In the latest Debian wheezy security update 2.2.22-13+deb7u5 the DH parameters can only be catted to the end of the SSLCertificateFile, but we may not want to automate that).
This issue has been filled against UCS 4.1. The maintenance with bug and security fixes for UCS 4.1 has ended on 5st of April 2018. Customers still on UCS 4.1 are encouraged to update to UCS 4.3. Please contact your partner or Univention for any questions. If this issue still occurs in newer UCS versions, please use "Clone this bug" or simply reopen the issue. In this case please provide detailed information on how this issue is affecting you.