Changes

From SME Server
Jump to navigationJump to search

SSL Settings (view source)

Revision as of 16:38, 17 May 2020

485 bytes added ,  16:38, 17 May 2020
no edit summary
Line 42: Line 42:  
  signal-event email-update
 
  signal-event email-update
 
{{Note box|This is only available on SME9, for SME10 POP3 is handled by dovecot.}}
 
{{Note box|This is only available on SME9, for SME10 POP3 is handled by dovecot.}}
 +
 +
===Dovecot===
 +
For windows 10 require TLSv1.2 to be enabled Default is disabled
 +
 +
[root@sme10a4 ~]# config show dovecot
 +
dovecot=service
 +
Quotas=enabled
 +
status=enabled
 +
 +
# config setprop dovecot TLSv1.2 enabled
 +
# signal-event email-update
 +
 +
[root@sme10a4 ~]# config show dovecot
 +
dovecot=service
 +
Quotas=enabled
 +
TLSv1.2=enabled
 +
status=enabled
    
==Ciphers==
 
==Ciphers==
Line 66: Line 83:     
  config setprop ldap CipherSuite 'HIGH:!SSLv2:!ADH:!aNULL:!MD5:!RC4'
 
  config setprop ldap CipherSuite 'HIGH:!SSLv2:!ADH:!aNULL:!MD5:!RC4'
−
  config setprop ldap qpsmtpd tlsCipher 'HIGH:!SSLv2:!ADH:!aNULL:!MD5:!RC4'
+
  config setprop qpsmtpd tlsCipher 'HIGH:!SSLv2:!ADH:!aNULL:!MD5:!RC4'
−
  config setprop ldap pop3s CipherSuite 'HIGH:!SSLv2:!ADH:!aNULL:!MD5:!RC4'
+
  config setprop pop3s CipherSuite 'HIGH:!SSLv2:!ADH:!aNULL:!MD5:!RC4'
    
Expand all templates and restart:
 
Expand all templates and restart:
Line 272: Line 289:  
|SSLv3
 
|SSLv3
 
|disabled
 
|disabled
−
|
+
|'''removed'''
 
|/etc/e-smith/templates/etc/openldap/slapd.conf/12tls
 
|/etc/e-smith/templates/etc/openldap/slapd.conf/12tls
 
|TLSProtocolMin '3.0'(enabled) or '3.1'(disabled)
 
|TLSProtocolMin '3.0'(enabled) or '3.1'(disabled)
 +
|-
 +
|ldap
 +
|TLSProtocolMin
 +
|'''none'''
 +
|TLSv1.2
 +
|/etc/e-smith/templates/etc/openldap/slapd.conf/12tls
 +
|SSLv3,TLSv1,TLSv1,1, TLSv1.2
 
|}
 
|}
   Line 320: Line 344:  
If your server does not support the protocol, you will get
 
If your server does not support the protocol, you will get
 
  Secure Renegotiation IS NOT supported
 
  Secure Renegotiation IS NOT supported
 +
     
 +
      [[category:developer]]
 
        
 
        
−
      [[category:developer]]
+
     
−
   
+
      [[category:advanced]]
−
     
  −
      [[category:advanced]]
 
Warren
80

edits

Retrieved from "https://wiki.koozali.org/Special:MobileDiff/38744...38765"

Navigation menu