Commitd042b7d

authored

Allow only secure ciphers for standard email config

An out of the box setup otherwise allows for unsafe ciphers, checkhttps://internet.nl ...

1 parentd8b966f commitd042b7dCopy full SHA for d042b7d

File tree

-0

lines changed

-0

lines changed

Lines changed: 6 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -100,6 +100,12 @@ let`
`100`	`100`	`smtpd_tls_key_file=cfg.sslKey;`
`101`	`101`
`102`	`102`	`smtpd_use_tls=true;`
	`103`	`+smtpd_tls_mandatory_protocols="!SSLv2, !SSLv3";`
	`104`	`+smtpd_tls_protocols="!SSLv2, !SSLv3";`
	`105`	`+smtpd_tls_mandatory_ciphers="high";`
	`106`	`+smtpd_tls_ciphers="high";`
	`107`	`+tls_high_cipherlist="EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA";`
	`108`	`+smtpd_tls_eecdh_grade="ultra";`
`103`	`109`	`};`
`104`	`110`
`105`	`111`	`masterCfOptions={options,config,name, ...}:{`

Comments

(0)