mirror of
https://github.com/mail-in-a-box/mailinabox.git
synced 2025-04-04 00:17:06 +00:00
tighten the cipher list
This commit is contained in:
parent
20646e43f8
commit
2461e9a36c
@ -436,8 +436,10 @@ olcTLSCertificateKeyFile: $STORAGE_ROOT/ssl/ssl_private_key.pem
|
|||||||
replace: olcTLSDHParamFile
|
replace: olcTLSDHParamFile
|
||||||
olcTLSDHParamFile: $STORAGE_ROOT/ssl/dh2048.pem
|
olcTLSDHParamFile: $STORAGE_ROOT/ssl/dh2048.pem
|
||||||
-
|
-
|
||||||
|
# TLS ciphers. To see expanded corresponding cipher suites run:
|
||||||
|
# gnutls-cli --priority PFS:-VERS-TLS1.0:-VERS-TLS1.1 -l
|
||||||
replace: olcTLSCipherSuite
|
replace: olcTLSCipherSuite
|
||||||
olcTLSCipherSuite: PFS
|
olcTLSCipherSuite: PFS:-VERS-TLS1.0:-VERS-TLS1.1
|
||||||
-
|
-
|
||||||
replace: olcTLSVerifyClient
|
replace: olcTLSVerifyClient
|
||||||
olcTLSVerifyClient: never
|
olcTLSVerifyClient: never
|
||||||
|
Loading…
Reference in New Issue
Block a user