From d47cf72650f57a027e456e189af8a31d132a4b6c Mon Sep 17 00:00:00 2001
From: Sylvain Dumont <sylvain.dumont35@gmail.com>
Date: Sat, 17 Dec 2016 10:59:04 +0100
Subject: [PATCH] use strong tls and ciphers

---
 target/dovecot/10-ssl.conf | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/target/dovecot/10-ssl.conf b/target/dovecot/10-ssl.conf
index 8873bc25..f6937d11 100644
--- a/target/dovecot/10-ssl.conf
+++ b/target/dovecot/10-ssl.conf
@@ -46,13 +46,13 @@ ssl_key = </etc/dovecot/private/dovecot.pem
 #ssl_dh_parameters_length = 1024
 
 # SSL protocols to use
-#ssl_protocols = !SSLv2
+ssl_protocols = TLSv1 TLSv1.1 TLSv1.2
 
 # SSL ciphers to use
-#ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL
+ssl_cipher_list = ECDHE+AESGCM ECDHE+AES DHE+AESGCM DHE+AES DES-CBC3-SHA
 
 # Prefer the server's order of ciphers over client's.
-#ssl_prefer_server_ciphers = no
+ssl_prefer_server_ciphers = yes
 
 # SSL crypto device to use, for valid values run "openssl engine"
 #ssl_crypto_device =