Use DH parameters from OpenSSL and remove support for ephemeral RSA

This adds support for DH parameters from 1024 to 8192 bits.

1 files changed, 0 insertions, 17 deletions

diff --git a/qmail-smtpd.8 b/qmail-smtpd.8
index d1c9820..05d1239 100644
--- a/qmail-smtpd.8
+++ b/qmail-smtpd.8
@@ -171,17 +171,6 @@ is set, it overrides
 .IR databytes .
 
 .TP 5
-.I dh1024.pem
-If these 1024 bit DH parameters are provided,
-.B qmail-smtpd
-will use them for TLS sessions instead of generating one on-the-fly 
-(which is very timeconsuming).
-.TP 5
-.I dh512.pem
-512 bit counterpart for 
-.B dh1024.pem. 
-
-.TP 5
 .I localiphost
 Replacement host name for local IP addresses.
 Default:
@@ -281,12 +270,6 @@ Envelope recipient addresses without @ signs are
 always allowed through.
 
 .TP 5
-.I rsa512.pem
-If this 512 bit RSA key is provided,
-.B qmail-smtpd
-will use it for TLS sessions instead of generating one on-the-fly.
-
-.TP 5
 .I servercert.pem
 SSL certificate to be presented to clients in TLS-encrypted sessions.
 Should contain both the certificate and the private key. Certifying Authority