base.m4, exchange.m4, config.m4: Tweak TLS settings.

[exim-config] / exchange.m4

diff --git a/exchange.m4 b/exchange.m4
index 00f0b05..ee27e3c 100644 (file)
--- a/exchange.m4
+++ b/exchange.m4
@@ -31,7 +31,7 @@ SECTION(global, tls)m4_dnl
 tls_certificate = CONF_sysconf_dir/server.cert
 tls_privatekey = CONF_sysconf_dir/server.key
 tls_advertise_hosts = *
-tls_dhparam = CONF_ca_dir/dh-param.pem
+tls_dhparam = CONF_ca_dir/dh-param-2048.pem
 tls_require_ciphers = ${if or {{={$received_port}{CONF_submission_port}} \
                               {match_ip {$sender_host_address}{+trusted}}} \
                           {CONF_good_ciphers} \