use strong tls and ciphers
This commit is contained in:
parent
90708bc924
commit
d47cf72650
|
@ -46,13 +46,13 @@ ssl_key = </etc/dovecot/private/dovecot.pem
|
||||||
#ssl_dh_parameters_length = 1024
|
#ssl_dh_parameters_length = 1024
|
||||||
|
|
||||||
# SSL protocols to use
|
# SSL protocols to use
|
||||||
#ssl_protocols = !SSLv2
|
ssl_protocols = TLSv1 TLSv1.1 TLSv1.2
|
||||||
|
|
||||||
# SSL ciphers to use
|
# SSL ciphers to use
|
||||||
#ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL
|
ssl_cipher_list = ECDHE+AESGCM ECDHE+AES DHE+AESGCM DHE+AES DES-CBC3-SHA
|
||||||
|
|
||||||
# Prefer the server's order of ciphers over client's.
|
# Prefer the server's order of ciphers over client's.
|
||||||
#ssl_prefer_server_ciphers = no
|
ssl_prefer_server_ciphers = yes
|
||||||
|
|
||||||
# SSL crypto device to use, for valid values run "openssl engine"
|
# SSL crypto device to use, for valid values run "openssl engine"
|
||||||
#ssl_crypto_device =
|
#ssl_crypto_device =
|
||||||
|
|
Loading…
Reference in New Issue