revert cipher list
authorChristian Mehlmauer <firefart@gmail.com>
Sat, 18 Oct 2014 06:43:51 +0000 (08:43 +0200)
committerChristian Mehlmauer <firefart@gmail.com>
Sat, 18 Oct 2014 06:43:51 +0000 (08:43 +0200)
src/configuration/MailServers/Dovecot/10-ssl.conf

index 13e9647..ecd0ad3 100644 (file)
@@ -49,7 +49,7 @@ ssl_key = </etc/dovecot/private/dovecot.pem
 ssl_protocols = !SSLv3 !SSLv2
 
 # SSL ciphers to use
-ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
+ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
 
 # Prefer the server's order of ciphers over client's.
 ssl_prefer_server_ciphers = yes