From 7a2ff6c74a8c766336dd8a65c6674c43e1f06e8e Mon Sep 17 00:00:00 2001 From: phil Date: Tue, 21 Nov 2023 07:46:11 +0100 Subject: [PATCH] Downgrade TLS to v1 because there are still mail servers out there that don't support newer versions --- templates/postfix/main.cf.j2 | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/templates/postfix/main.cf.j2 b/templates/postfix/main.cf.j2 index b654a0b..610b119 100644 --- a/templates/postfix/main.cf.j2 +++ b/templates/postfix/main.cf.j2 @@ -41,8 +41,8 @@ smtpd_tls_key_file = {{ postfix_smtpd_tls_key_file }} smtpd_tls_ciphers = medium smtpd_tls_mandatory_ciphers = medium smtpd_tls_exclude_ciphers = aNULL, eNULL, MD5, DES, 3DES, DES-CBC3-SHA, RC4-SHA, AES256-SHA, AES128-SHA, DHE-RSA-AES256-SHA -smtpd_tls_mandatory_protocols = >=TLSv1.1 -smtpd_tls_protocols = >=TLSv1.1 +smtpd_tls_mandatory_protocols = >=TLSv1 +smtpd_tls_protocols = >=TLSv1 smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_tls_session_cache_timeout = 7200s smtpd_tls_loglevel = 1 @@ -57,7 +57,7 @@ smtp_tls_security_level = dane smtp_dns_support_level = dnssec smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_tls_session_cache_timeout = 7200s -smtp_tls_protocols = >=TLSv1.1 +smtp_tls_protocols = >=TLSv1 {% if postfix_smtp_tls_policy_maps is defined %} smtp_tls_policy_maps = {% for map in postfix_smtp_tls_policy_maps %}