<?xml version="1.0"?>
<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/><title>mkdhparams</title><link rel="stylesheet" type="text/css" href="style.css"/><meta name="generator" content="DocBook XSL Stylesheets Vsnapshot"/><link rel="home" href="#mkdhparams" title="mkdhparams"/><link xmlns="" rel="stylesheet" type="text/css" href="manpage.css"/><meta xmlns="" name="MSSmartTagsPreventParsing" content="TRUE"/><link xmlns="" rel="icon" href="icon.gif" type="image/gif"/><!--

Copyright 1998 - 2009 S. Varshavchik.  See COPYING for distribution
information.

--></head><body><div class="refentry"><a id="mkdhparams" shape="rect"> </a><div class="titlepage"/><div class="refnamediv"><h2>Name</h2><p>mkdhparams — Create new DH parameters for the Courier Mail Server</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="command">@sbindir@/mkdhparams</code> </p></div></div><div class="refsect1"><a id="mkdhparams_description" shape="rect"> </a><h2>DESCRIPTION</h2><p>
      This script is intended to be executed from a cron job, monthly.
      If the file <code class="filename">@sysconfdir@/dhparams.pem</code> is older than
      25 days, the script creates a new file. This file contains pregenerated
      DH parameters for the Courier Mail Server.
    </p><p>
      The <code class="envar">DH_BITS</code> environment variable, if set controls the
      length of the generated DH parameters. It gets passed, verbatim, to
      either the <span class="command"><strong>dhparam</strong></span> OpenSSL command, or the
      <code class="option">--sec-param</code> option to GnuTLS's
      <span class="command"><strong>certtool</strong></span>. The default value is 768 for OpenSSL,
      and <span class="quote">“<span class="quote">high</span>”</span> for GnuTLS.
    </p></div></div></body></html>
