#601 F-33 release notes: CentOS-7 Dovecot key update
Merged 3 years ago by pbokoc. Opened 3 years ago by jankratochvil.
fedora-docs/ jankratochvil/release-notes dovecot  into  f33

@@ -42,6 +42,14 @@ 

      PubkeyAcceptedKeyTypes ssh-rsa

  ----

  

+ * For RHEL-7/CentOS-7 Dovecot set in /etc/pki/dovecot/dovecot-openssl.cnf:

+ 

+ [source,shell]

+ ----

+ [ req ]

+ default_bits = 2048

+ ----

+ 

  * The most secure method is to use Elliptic Curve Digital Signature Algorithm (ECDSA) to generate new ssh keys, as the methods above override Fedora 33 new crypto polices rendering your system vulnerable.

  

  

no initial comment

Pull-Request has been merged by pbokoc

3 years ago
Metadata