Skip to content

Commit 01c8176

Browse files
committed
dovecot: also generate DANE reocrds for non-encrypted protocols
- Generate imap and pop3 DANE records, on ports 143 and 110 resp. To update your server, run the following playbook: --- ROLE=dovecot apb -i ../config/hosts.yml -v -t facts,scripts install.yml ---
1 parent d8713bf commit 01c8176

File tree

2 files changed

+2
-0
lines changed

2 files changed

+2
-0
lines changed

roles/dovecot/files/scripts/renew-cert-imap.sh

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,7 @@ if [ $server_until_epoch -lt $file_until_epoch ]; then
4949
echo "Not live"
5050
elif [ "$action" = "activate" ]; then
5151
/usr/local/sbin/dane-set-record imap 993
52+
/usr/local/sbin/dane-set-record imap 143
5253
systemctl restart dovecot
5354
fi
5455
elif [ "$action" = "status" ]; then

roles/dovecot/files/scripts/renew-cert-pop3.sh

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,7 @@ if [ $server_until_epoch -lt $file_until_epoch ]; then
4848
if [ "$action" = "status" ]; then
4949
echo "Not live"
5050
elif [ "$action" = "activate" ]; then
51+
/usr/local/sbin/dane-set-record pop3 110
5152
/usr/local/sbin/dane-set-record pop3 995
5253
systemctl restart dovecot
5354
fi

0 commit comments

Comments
 (0)