浏览代码

Merge pull request #1949 from patschi/patch-1

[Postfix] Security: Prefer server-side ciphers
André Peters 6 年之前
父节点
当前提交
a13c2c9359
共有 1 个文件被更改,包括 1 次插入0 次删除
  1. 1 0
      data/conf/postfix/main.cf

+ 1 - 0
data/conf/postfix/main.cf

@@ -99,6 +99,7 @@ lmtp_tls_protocols = !SSLv2, !SSLv2, !SSLv3
 smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
 smtpd_tls_protocols = !SSLv2, !SSLv3
 smtpd_tls_security_level = may
+tls_preempt_cipherlist = yes
 tls_ssl_options = NO_COMPRESSION
 smtpd_tls_mandatory_ciphers = high
 virtual_alias_maps = proxy:mysql:/opt/postfix/conf/sql/mysql_virtual_alias_maps.cf,