Jon Lockwood
2a222df778
used https://ssl-config.mozilla.org/ to generate recommended ciphers config for dovecot and postfix. postfix set to use medium ciphers due to possibility of smtp servers not being updated to latest. MR !9
21 lines
551 B
Plaintext
21 lines
551 B
Plaintext
##
|
|
## SSL settings
|
|
##
|
|
|
|
|
|
#verbose_ssl = yes
|
|
|
|
ssl = required
|
|
|
|
ssl_prefer_server_ciphers = yes
|
|
|
|
ssl_client_ca_dir = /etc/ssl/certs
|
|
|
|
ssl_dh = </certs/dovecot/dh.pem
|
|
ssl_cert = </certs/dovecot/cert.pem
|
|
ssl_key = </certs/dovecot/key.pem
|
|
|
|
# Generated by https://ssl-config.mozilla.org/
|
|
ssl_min_protocol = TLSv1.2
|
|
ssl_cipher_list = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
|