Disable SSLv3 and RC4 support for Dovecot

Issue #54 resolved
Former user created an issue

Please disable Dovecot support for SSLv3 protocol and RC4 cipher in /etc/dovecot/conf.d/10-ssl.conf

ssl_protocols = !SSLv2 !SSLv3 ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4 ssl_prefer_server_ciphers = yes

Comments (2)

  1. Log in to comment