4 ms·
ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL Does this just disable all SSLv2 ciphers, or disable SSLv2 via SSL_OP_NO_SSLv2? The former might not be enough, u
by pfg 11y ago
ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL
Does this just disable all SSLv2 ciphers, or disable SSLv2 via SSL_OP_NO_SSLv2? The former might not be enough, unless your OpenSSL version includes fixes from 1.0.2f and g.
- capnrefsmmat 11y agoDovecot also supports disabling SSLv2 directly: ssl_protocols = !SSLv2 !SSLv3