Force TLSv1.2 in Dovecot.

fixes #22 (partly)
iredmail · Apr 5, 2020 · ff09007 · ff09007
1 parent 493f1af
commit ff09007
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/samples/dovecot/dovecot22.conf b/samples/dovecot/dovecot22.conf
@@ -40,7 +40,7 @@ syslog_facility = PH_IREDMAIL_SYSLOG_FACILITY
 # SSL: Global settings.
 # Refer to wiki site for per protocol, ip, server name SSL settings:
 # http://wiki.dovecot.org/SSL/DovecotConfiguration
-ssl_protocols = !SSLv2 !SSLv3
+ssl_protocols = !SSLv2 !SSLv3 !TLSv1 !TLSv1.1
 ssl = required
 verbose_ssl = no
 #ssl_ca = </path/to/ca

diff --git a/samples/dovecot/dovecot23.conf b/samples/dovecot/dovecot23.conf
@@ -40,7 +40,7 @@ syslog_facility = PH_IREDMAIL_SYSLOG_FACILITY
 # SSL: Global settings.
 # Refer to wiki site for per protocol, ip, server name SSL settings:
 # http://wiki2.dovecot.org/SSL/DovecotConfiguration
-#ssl_min_protocol = TLSv1.2
+ssl_min_protocol = TLSv1.2
 ssl = required
 verbose_ssl = no
 #ssl_ca = </path/to/ca