From: Silvio Rhatto <rhatto@riseup.net>
Date: Sat, 19 Mar 2016 12:21:30 +0000 (-0300)
Subject: Disable SSLv3 again at dovecot
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=79a1a1933d459a446796e6e873ac69188266488a;p=puppet-mail.git

Disable SSLv3 again at dovecot
---

diff --git a/templates/dovecot/dovecot.conf.wheezy.erb b/templates/dovecot/dovecot.conf.wheezy.erb
index a10a18a..823ebb3 100644
--- a/templates/dovecot/dovecot.conf.wheezy.erb
+++ b/templates/dovecot/dovecot.conf.wheezy.erb
@@ -40,7 +40,7 @@ ssl_key = </etc/ssl/private/cert.pem
 
 # SSL ciphers to use
 # See http://www.virtualmin.com/node/25057
-ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3
+ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:!SSLv3
 
 userdb {
   args = uid=5000 gid=5000 home=/var/mail/virtual/%u allow_all_users=yes