From 1f6acd780995fda8b7e1f5f1469c6db54ff8d57a Mon Sep 17 00:00:00 2001 From: Silvio Rhatto Date: Tue, 16 Jul 2013 17:50:11 -0300 Subject: Trying a more restrictive cipher suite for dovecot that works --- templates/dovecot/dovecot.conf.squeeze.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/dovecot/dovecot.conf.squeeze.erb b/templates/dovecot/dovecot.conf.squeeze.erb index c9b092c..2df5834 100644 --- a/templates/dovecot/dovecot.conf.squeeze.erb +++ b/templates/dovecot/dovecot.conf.squeeze.erb @@ -121,7 +121,7 @@ ssl_key_file = /etc/ssl/private/cert.pem # SSL ciphers to use # See http://www.virtualmin.com/node/25057 -ssl_cipher_list = HIGH:!LOW:!MEDIUM:!MD5:!SSL2:!EXP-ADH-DES-CBC-SHA:!EXP-EDH-RSA-DES-CBC-SHA:!EXP-DES-CBC-SHA:!EXP-EDH-RSA-DES-CBC-SHA:!EXP-ADH-DES-CBC-SHA:!EXP-DES-CBC-SHA:!ADH-AES256-SHA:!ADH-AES128-SHA:!ADH-DES-CBC3-SHA:!EXP-ADH-DES-CBC-SHA:!EXP-ADH-DES-CBC-SHA:!ADH-DES-CBC3-SHA:+TLSv1:+SSLv3:!SSLv2:+TLSv1.1:+TLSv1.2 +ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3 # Show protocol level SSL errors. #verbose_ssl = no -- cgit v1.2.3