Version in base suite: 8.2.24+dfsg.1-1 Base version: ircd-hybrid_8.2.24+dfsg.1-1 Target version: ircd-hybrid_8.2.24+dfsg.1-1+deb10u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/i/ircd-hybrid/ircd-hybrid_8.2.24+dfsg.1-1.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/i/ircd-hybrid/ircd-hybrid_8.2.24+dfsg.1-1+deb10u1.dsc changelog | 6 ++++++ ircd-hybrid.postinst | 5 +++++ ircd.conf | 2 +- 3 files changed, 12 insertions(+), 1 deletion(-) diff -Nru ircd-hybrid-8.2.24+dfsg.1/debian/changelog ircd-hybrid-8.2.24+dfsg.1/debian/changelog --- ircd-hybrid-8.2.24+dfsg.1/debian/changelog 2018-04-06 21:58:00.000000000 +0000 +++ ircd-hybrid-8.2.24+dfsg.1/debian/changelog 2020-02-23 22:07:54.000000000 +0000 @@ -1,3 +1,9 @@ +ircd-hybrid (1:8.2.24+dfsg.1-1+deb10u1) buster; urgency=medium + + * Use dhparam.pem to avoid segfault on startup (Closes: #932774) + + -- Dominic Hargreaves Sun, 23 Feb 2020 22:07:54 +0000 + ircd-hybrid (1:8.2.24+dfsg.1-1) unstable; urgency=medium * New upstream release diff -Nru ircd-hybrid-8.2.24+dfsg.1/debian/ircd-hybrid.postinst ircd-hybrid-8.2.24+dfsg.1/debian/ircd-hybrid.postinst --- ircd-hybrid-8.2.24+dfsg.1/debian/ircd-hybrid.postinst 2018-04-05 18:41:06.000000000 +0000 +++ ircd-hybrid-8.2.24+dfsg.1/debian/ircd-hybrid.postinst 2020-02-23 22:07:09.000000000 +0000 @@ -48,6 +48,11 @@ echo "See README.Debian about personalizing the data in ircd.pem." fi +if [ ! -f /etc/ircd-hybrid/key/dhparam.pem ]; then + echo "Generating dhparam.pem ..." + openssl dhparam -out /etc/ircd-hybrid/key/dhparam.pem 2048 +fi + # These directories may have been created before, but we need to make them # owned by irc. Or the initscript will get owned. If it's already this # way, this operation makes no difference. diff -Nru ircd-hybrid-8.2.24+dfsg.1/debian/ircd.conf ircd-hybrid-8.2.24+dfsg.1/debian/ircd.conf --- ircd-hybrid-8.2.24+dfsg.1/debian/ircd.conf 2018-04-05 18:41:06.000000000 +0000 +++ ircd-hybrid-8.2.24+dfsg.1/debian/ircd.conf 2020-02-23 22:07:09.000000000 +0000 @@ -158,7 +158,7 @@ * GnuTLS: * certtool --generate-dh-params --sec-param=medium --outfile dhparam.pem */ -# ssl_dh_param_file = "/etc/ircd-hybrid/dhparam.pem"; + ssl_dh_param_file = "/etc/ircd-hybrid/key/dhparam.pem"; /* * ssl_dh_elliptic_curve: defines the curve to use for the