Univention Bugzilla – Bug 52737
disable deprecated TLS-protocols by default for Postfix
Last modified: 2021-02-02 17:03:18 CET
Template /etc/univention/templates/files/etc/postfix/main.cf.d/60_tls will exclude SSLv2 for unset mail/postfix*tls*protocols. At some stage SSLv3 was disabled, most likely by settung UCRVs. Using TLSv1 and TLSv1.1 is not recommended for some time, we should disable these protocols by default. ("!SSLv2, !SSLv3, !TLSv1, !TLSv1.1")