From: Silvio Rhatto <rhatto@riseup.net>
Date: Sun, 26 Oct 2014 15:36:16 +0000 (-0200)
Subject: Disabling tls compression
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=d26af22932b1c868512dcb39644bdb577adb160b;p=puppet-mail.git

Disabling tls compression
---

diff --git a/manifests/tls/hardened.pp b/manifests/tls/hardened.pp
index 78d8093..735135c 100644
--- a/manifests/tls/hardened.pp
+++ b/manifests/tls/hardened.pp
@@ -9,6 +9,7 @@ class mail::tls::hardened inherits mail::tls {
   postfix::config { "smtpd_tls_mandatory_protocols":    value => '!SSLv2, !SSLv3' }
   postfix::config { "smtpd_tls_session_cache_database": value => 'btree:${data_directory}/smtpd_scache' }
   postfix::config { "smtp_tls_session_cache_database":  value => 'btree:${data_directory}/smtp_scache' }
+  postfix::config { "tls_ssl_options":                  value => 'no_compression' }
   postfix::config { "smtpd_tls_loglevel":               value => '1' }
 
   # DH parameters