From 15a5232629a37b3df8a476f984343375950fa2ff Mon Sep 17 00:00:00 2001
From: manuel <manuel@mausz.at>
Date: Mon, 22 Jun 2015 21:28:22 +0200
Subject: Use DH parameters from OpenSSL and remove support for ephemeral RSA

This adds support for DH parameters from 1024 to 8192 bits.
---
 qmail-smtpd.8 | 17 -----------------
 1 file changed, 17 deletions(-)

(limited to 'qmail-smtpd.8')

diff --git a/qmail-smtpd.8 b/qmail-smtpd.8
index d1c9820..05d1239 100644
--- a/qmail-smtpd.8
+++ b/qmail-smtpd.8
@@ -170,17 +170,6 @@ If the environment variable
 is set, it overrides
 .IR databytes .
 
-.TP 5
-.I dh1024.pem
-If these 1024 bit DH parameters are provided,
-.B qmail-smtpd
-will use them for TLS sessions instead of generating one on-the-fly 
-(which is very timeconsuming).
-.TP 5
-.I dh512.pem
-512 bit counterpart for 
-.B dh1024.pem. 
-
 .TP 5
 .I localiphost
 Replacement host name for local IP addresses.
@@ -280,12 +269,6 @@ may include wildcards:
 Envelope recipient addresses without @ signs are
 always allowed through.
 
-.TP 5
-.I rsa512.pem
-If this 512 bit RSA key is provided,
-.B qmail-smtpd
-will use it for TLS sessions instead of generating one on-the-fly.
-
 .TP 5
 .I servercert.pem
 SSL certificate to be presented to clients in TLS-encrypted sessions.
-- 
cgit v1.2.3