From c0a01be908b259918865f4dd4c816f61cf6119ae Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Wed, 28 Oct 2015 18:45:54 +0100
Subject: Internal Postfix config: Generate RSA 4096 keys by default.

---
 roles/common/tasks/mail.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'roles/common/tasks/mail.yml')

diff --git a/roles/common/tasks/mail.yml b/roles/common/tasks/mail.yml
index 1873928..c8e2495 100644
--- a/roles/common/tasks/mail.yml
+++ b/roles/common/tasks/mail.yml
@@ -57,7 +57,7 @@
                          --pubkey=/etc/postfix/ssl/{{ ansible_fqdn }}.pem
                          --privkey=/etc/postfix/ssl/{{ ansible_fqdn }}.key
                          --ou=Postfix --cn={{ ansible_fqdn }}
-                         -t ecdsa -b secp384r1 -h sha512
+                         -t rsa -b 4096 -h sha512
   register: r4
   changed_when: r4.rc == 0
   failed_when: r4.rc > 1
-- 
cgit v1.2.3