Attachment 6762 Details for Bug 38044 – Patch allowing to disable the use of SSLv3 via ucr

[patch] Patch allowing to disable the use of SSLv3 via ucr

postfix_tls_protocols.patch (text/plain), 1.33 KB, created by Lutz Willek on 2015-03-15 22:18:22 CET

(hide)

Description:

Filename:

MIME Type:

Creator: Lutz Willek

Created: 2015-03-15 22:18:22 CET

Size: 1.33 KB

patch

obsolete

>*** /etc/univention/templates/files/etc/postfix/main.cf.d_orig/60_tls	2015-03-15 16:16:07.083826870 +0100
>--- /etc/univention/templates/files/etc/postfix/main.cf.d/60_tls	2015-03-15 21:19:43.191809032 +0100
>***************
>*** 5,10 ****
>--- 5,12 ----
>  smtpd_timeout = 300s
>  @!@
>  fqdn = '%s.%s' % (baseConfig.get('hostname'), baseConfig.get('domainname'))
>+ print 'smtpd_tls_mandatory_protocols = %s' % baseConfig.get('mail/postfix/smtpd/tls/mandatory_protocols', '!SSLv2')
>+ print 'smtpd_tls_protocols = %s' % baseConfig.get('mail/postfix/smtpd/tls/protocols', '')
>  print 'smtpd_tls_cert_file = %s' % baseConfig.get('mail/postfix/ssl/certificate', '/etc/univention/ssl/%s/cert.pem' % fqdn)
>  print 'smtpd_tls_key_file = %s' % baseConfig.get('mail/postfix/ssl/key', '/etc/univention/ssl/%s/private.key' % fqdn)
>  if baseConfig.get('mail/postfix/ssl/cafile'):
>***************
>*** 25,30 ****
>--- 27,34 ----
>  # smtp client
>  @!@
>  print 'smtp_tls_security_level = %s' % baseConfig.get('mail/postfix/tls/client/level', 'none')
>+ print 'smtp_tls_mandatory_protocols = %s' % baseConfig.get('mail/postfix/tls/client/mandatory_protocols', '!SSLv2')
>+ print 'smtp_tls_protocols = %s' % baseConfig.get('mail/postfix/tls/client/protocols', '!SSLv2')
>  @!@
>  
>  # Support broken clients like Microsoft Outlook Express 4.x which expect AUTH=LOGIN instead of AUTH LOGIN

Actions: View | Diff

Attachments on bug 38044: 6762