Skip to content

Commit ce4a09d

Browse files
author
Kristan Kenney
committed
Fix check conditions in 1.0.3
1 parent 0956929 commit ce4a09d

File tree

1 file changed

+9
-5
lines changed

1 file changed

+9
-5
lines changed

install/upgrade/versions/latest.sh

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,9 @@ fi
1414

1515
# Replace dhparam 1024 with dhparam 4096
1616
echo "(*) Increasing Diffie-Hellman Parameter strength to 4096-bit..."
17-
mv /etc/ssl/dhparam.pem $HESTIA_BACKUP/conf/
17+
if [ -e /etc/ssl/dhparam.pem ]; then
18+
mv /etc/ssl/dhparam.pem $HESTIA_BACKUP/conf/
19+
fi
1820
cp -f $HESTIA_INSTALL_DIR/ssl/dhparam.pem /etc/ssl/
1921
chmod 600 /etc/ssl/dhparam.pem
2022

@@ -24,12 +26,14 @@ sed -i "s/LoginGraceTime 2m/LoginGraceTime 1m/g" /etc/ssh/sshd_config
2426
sed -i "s/#LoginGraceTime 2m/LoginGraceTime 1m/g" /etc/ssh/sshd_config
2527

2628
# Enhance Vsftpd security
27-
echo "(*) Hardening Vsftpd SSL configuration..."
28-
cp -f /etc/vsftpd.conf $HESTIA_BACKUP/conf/
29-
sed -i "s|ssl_tlsv1=YES|ssl_tlsv1=NO|g" /etc/vsftpd.conf
29+
if [ "$FTP_SYSTEM" = "vsftpd" ]; then
30+
echo "(*) Hardening Vsftpd SSL configuration..."
31+
cp -f /etc/vsftpd.conf $HESTIA_BACKUP/conf/
32+
sed -i "s|ssl_tlsv1=YES|ssl_tlsv1=NO|g" /etc/vsftpd.conf
33+
fi
3034

3135
# Enhance Dovecot security
32-
if [ ! -z "$IMAP_SYSTEM" ]; then
36+
if [ "$IMAP_SYSTEM" = "dovecot" ]; then
3337
echo "(*) Hardening Dovecot SSL configuration..."
3438
mv /etc/dovecot/conf.d/10-ssl.conf $HESTIA_BACKUP/conf/
3539
cp -f $HESTIA_INSTALL_DIR/dovecot/conf.d/10-ssl.conf /etc/dovecot/conf.d/

0 commit comments

Comments
 (0)