Merge pull request #400 from sylvaindumont/patch-2

use strong tls and ciphers
This commit is contained in:
Thomas VIAL 2016-12-17 22:28:52 +01:00 committed by GitHub
commit 86141ebb8c

View file

@ -46,13 +46,13 @@ ssl_key = </etc/dovecot/private/dovecot.pem
#ssl_dh_parameters_length = 1024
# SSL protocols to use
#ssl_protocols = !SSLv2
ssl_protocols = TLSv1 TLSv1.1 TLSv1.2
# SSL ciphers to use
#ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL
ssl_cipher_list = ECDHE+AESGCM ECDHE+AES DHE+AESGCM DHE+AES DES-CBC3-SHA
# Prefer the server's order of ciphers over client's.
#ssl_prefer_server_ciphers = no
ssl_prefer_server_ciphers = yes
# SSL crypto device to use, for valid values run "openssl engine"
#ssl_crypto_device =