Skip to content

Commit 8ddd779

Browse files
authored
Adapted "Enhanced and Optimized TLS" for Ubuntu 24.04 (hestiacp#4451)
1 parent 2c96ae6 commit 8ddd779

File tree

1 file changed

+10
-1
lines changed

1 file changed

+10
-1
lines changed

install/hst-install-ubuntu.sh

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1489,8 +1489,17 @@ if [ "$release" = "20.04" ]; then
14891489
elif grep -qw "^system_default = system_default_sect$" /etc/ssl/openssl.cnf 2> /dev/null; then
14901490
sed -i '/^system_default = system_default_sect$/a system_default = hestia_openssl_sect\n\n[hestia_openssl_sect]\nCiphersuites = '"$tls13_ciphers"'\nOptions = PrioritizeChaCha' /etc/ssl/openssl.cnf
14911491
fi
1492-
elif [ "$release" != "20.04" ]; then
1492+
elif [ "$release" = "22.04" ]; then
14931493
sed -i '/^system_default = system_default_sect$/a system_default = hestia_openssl_sect\n\n[hestia_openssl_sect]\nCiphersuites = '"$tls13_ciphers"'\nOptions = PrioritizeChaCha' /etc/ssl/openssl.cnf
1494+
elif [ "$release" = "24.04" ]; then
1495+
if ! grep -qw "^ssl_conf = ssl_sect$" /etc/ssl/openssl.cnf 2> /dev/null; then
1496+
sed -i '/providers = provider_sect$/a ssl_conf = ssl_sect' /etc/ssl/openssl.cnf
1497+
fi
1498+
if ! grep -qw "^[ssl_sect]$" /etc/ssl/openssl.cnf 2> /dev/null; then
1499+
sed -i '$a \\n[ssl_sect]\nsystem_default = hestia_openssl_sect\n\n[hestia_openssl_sect]\nCiphersuites = '"$tls13_ciphers"'\nOptions = PrioritizeChaCha' /etc/ssl/openssl.cnf
1500+
elif grep -qw "^system_default = system_default_sect$" /etc/ssl/openssl.cnf 2> /dev/null; then
1501+
sed -i '/^system_default = system_default_sect$/a system_default = hestia_openssl_sect\n\n[hestia_openssl_sect]\nCiphersuites = '"$tls13_ciphers"'\nOptions = PrioritizeChaCha' /etc/ssl/openssl.cnf
1502+
fi
14941503
fi
14951504

14961505
# Generating SSL certificate

0 commit comments

Comments
 (0)