fedora-docs / release-notes

Clone
Source Code
GIT

#607 F-33 release notes: CentOS-7 Dovecot key is fixed in 7.9
Merged 3 years ago by pbokoc. Opened 3 years ago by jankratochvil.
fedora-docs/ jankratochvil/release-notes dovecot3  into  f33

file modified
+2 -2 
@@ -42,12 +42,12 @@ 
 

      PubkeyAcceptedKeyTypes ssh-rsa
 

  ----
 

  

- * For RHEL-7/CentOS-7 Dovecot set in /etc/pki/dovecot/dovecot-openssl.cnf:
 

+ * For Dovecot in RHEL/CentOS up to 7.8 (it is fixed in 7.9) set in /etc/pki/dovecot/dovecot-openssl.cnf:
 

  

  [source,shell]
 

  ----
 

  [ req ]
 

- default_bits = 2048
 

+ default_bits = 3072
 

  ----
 

  

  * The most secure method is to use Elliptic Curve Digital Signature Algorithm (ECDSA) to generate new ssh keys, as the methods above override Fedora 33 new crypto polices rendering your system vulnerable.

no initial comment

Thank you!

Pull-Request has been merged by pbokoc
3 years ago
Metadata
None
No Tags
Changes Summary 1
+2 -2
file changed
modules/release-notes/pages/sysadmin/Security.adoc
Powered by Pagure 5.13.3
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.