File tree Expand file tree Collapse file tree 1 file changed +9
-5
lines changed
Expand file tree Collapse file tree 1 file changed +9
-5
lines changed Original file line number Diff line number Diff line change 1414
1515# Replace dhparam 1024 with dhparam 4096
1616echo " (*) Increasing Diffie-Hellman Parameter strength to 4096-bit..."
17- mv /etc/ssl/dhparam.pem $HESTIA_BACKUP /conf/
17+ if [ -e /etc/ssl/dhparam.pem ]; then
18+ mv /etc/ssl/dhparam.pem $HESTIA_BACKUP /conf/
19+ fi
1820cp -f $HESTIA_INSTALL_DIR /ssl/dhparam.pem /etc/ssl/
1921chmod 600 /etc/ssl/dhparam.pem
2022
@@ -24,12 +26,14 @@ sed -i "s/LoginGraceTime 2m/LoginGraceTime 1m/g" /etc/ssh/sshd_config
2426sed -i " s/#LoginGraceTime 2m/LoginGraceTime 1m/g" /etc/ssh/sshd_config
2527
2628# Enhance Vsftpd security
27- echo " (*) Hardening Vsftpd SSL configuration..."
28- cp -f /etc/vsftpd.conf $HESTIA_BACKUP /conf/
29- sed -i " s|ssl_tlsv1=YES|ssl_tlsv1=NO|g" /etc/vsftpd.conf
29+ if [ " $FTP_SYSTEM " = " vsftpd" ]; then
30+ echo " (*) Hardening Vsftpd SSL configuration..."
31+ cp -f /etc/vsftpd.conf $HESTIA_BACKUP /conf/
32+ sed -i " s|ssl_tlsv1=YES|ssl_tlsv1=NO|g" /etc/vsftpd.conf
33+ fi
3034
3135# Enhance Dovecot security
32- if [ ! -z " $IMAP_SYSTEM " ]; then
36+ if [ " $IMAP_SYSTEM " = " dovecot " ]; then
3337 echo " (*) Hardening Dovecot SSL configuration..."
3438 mv /etc/dovecot/conf.d/10-ssl.conf $HESTIA_BACKUP /conf/
3539 cp -f $HESTIA_INSTALL_DIR /dovecot/conf.d/10-ssl.conf /etc/dovecot/conf.d/
You can’t perform that action at this time.
0 commit comments