Revert "no SSLv3 damn it"
authorAaron Kaplan <aaron@lo-res.org>
Fri, 17 Oct 2014 12:18:43 +0000 (14:18 +0200)
committerAaron Kaplan <aaron@lo-res.org>
Fri, 17 Oct 2014 12:18:43 +0000 (14:18 +0200)
This reverts commit 301c910000a27714a13ba7843c16379271a5ef7a.

src/configuration/MailServers/Postfix/main.cf

index 7416b1e..15aede5 100644 (file)
@@ -34,7 +34,7 @@ tls_ssl_options = NO_COMPRESSION
 
 smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
 smtpd_tls_mandatory_ciphers=high
-tls_high_cipherlist=EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:!SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
+tls_high_cipherlist=EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
 smtpd_tls_eecdh_grade=ultra
 
 smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache