Finally I found some time to update the vanyi.org server. The first step: move from Debian Stretch, before the support expires in June 2022 to Buster. The update was quite uneventful:
# apt-get update
# apt-get dist-upgrade
I’m still checking, but it looks like only 3 things needed manual update in configuration:
- dovecot (IMAP server)
- apache
- ejabberd
Dovecot replaced ssl_parameters with ssl_dh. To fix the configuration I just followed this page. Actually quite simple. First create a dh.pem (can take several minutes, which was at least half an hour in my case);
# openssl dhparam -out /etc/dovecot/dh.pem 4096
Then you need to update /etc/dovecot/dovecot.conf:
ssl_dh=</etc/dovecot/dh.pem
After a restart dovecot works again.
For apache it is even easier, as it is documented on this page. Just enable the socache_dbm module:
# a2enmod socache_dbm
For ejabberd I have not had the time yet.