From: Silvio Rhatto <rhatto@riseup.net>
Date: Mon, 20 Oct 2014 15:09:53 +0000 (-0200)
Subject: Disabling SSLv3 in dovecot
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=93d8a56788fc5387ad7e76899f7d293e073e45b7;p=puppet-mail.git

Disabling SSLv3 in dovecot
---

diff --git a/templates/dovecot/dovecot.conf.wheezy.erb b/templates/dovecot/dovecot.conf.wheezy.erb
index a10a18a..823ebb3 100644
--- a/templates/dovecot/dovecot.conf.wheezy.erb
+++ b/templates/dovecot/dovecot.conf.wheezy.erb
@@ -40,7 +40,7 @@ ssl_key = </etc/ssl/private/cert.pem
 
 # SSL ciphers to use
 # See http://www.virtualmin.com/node/25057
-ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3
+ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:!SSLv3
 
 userdb {
   args = uid=5000 gid=5000 home=/var/mail/virtual/%u allow_all_users=yes