浏览代码

Merge pull request #1514 from mailcow/revert-1510-patch-1

Revert "[Postfix] Default SMTP server security grade for EECDH key exchange"
André Peters 7 年之前
父节点
当前提交
4407e7a8a1
共有 1 个文件被更改,包括 1 次插入1 次删除
  1. 1 1
      data/conf/postfix/main.cf

+ 1 - 1
data/conf/postfix/main.cf

@@ -88,7 +88,7 @@ smtpd_sender_restrictions = reject_authenticated_sender_login_mismatch, permit_m
 smtpd_soft_error_limit = 3
 smtpd_tls_auth_only = yes
 smtpd_tls_dh1024_param_file = /etc/ssl/mail/dhparams.pem
-smtpd_tls_eecdh_grade = auto
+smtpd_tls_eecdh_grade = strong
 smtpd_tls_exclude_ciphers = ECDHE-RSA-RC4-SHA, RC4, aNULL, DES-CBC3-SHA, ECDHE-RSA-DES-CBC3-SHA, EDH-RSA-DES-CBC3-SHA
 smtpd_tls_loglevel = 1
 smtp_tls_mandatory_protocols = !SSLv2, !SSLv3