Package: courier-mta-ssl
Version: 0.73.1-1.6
A clean install with no user supplied config files results in
/etc/courier/esmtpd-ssl having the line
"TLS_DHPARAMS=/usr/lib/courier/dhparams.pem", but the output of
mkdhparams sensibly places dhparams.pem in /etc/courier/dhparams.pem.
As I am ignorant concerning the upstream build, I don't know whether the
misconfiguration results from special debian build parameters or not. I
do notice that there are man pages for other certificate mk* utilities
accompanying courier that use the /usr/lib prefix as a default.
I know of no good reason why the user should have to bother knowing to
change TLS_DHPARAMS to a default filepath like /etc/courier/dhparams.pem.
Therefore, I suggest patching esmtpd-ssl so that it includes
"TLS_DHPARAMS=/etc/courier/dhparams.pem". Alternatively, I suggest some
sort of patch which by default creates a soft link which permits
accession of dhparams.pem from either path.
Please consider moving this misconfiguration issue upstream if applicable.
