* Sat Jan 18 2025 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-14.sme

- use esmith::ssl to set ciphers and protocol [SME: 12821]
  improve cipher order to get strongers first
  drop SSLv2
This commit is contained in:
2025-01-18 15:41:12 -05:00
parent 52e318c808
commit 9e05a63784
4 changed files with 13 additions and 7 deletions

View File

@@ -7,5 +7,9 @@
foreach my $prope (qw( SSLv2 SSLv3 TLSv1 TLSv1.1 TLSv1.2 dh )) {
$DB->get_prop_and_delete('dovecot', $prope) if (exists $dovecot{$prope});
}
# drop SSLv2 from ssl_min_protocol
foreach my $prope (qw( SSLv2 )) {
$DB->get_prop_and_delete('dovecot', 'ssl_min_protocol') if (exists $dovecot{'ssl_min_protocol'} && $dovecot{'ssl_min_protocol'} eq $prope);
}
}