senselab/ansible-role-postfix
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Downgrade TLS to v1

Browse source 
because there are still mail servers out there that don't support
newer versions
This commit is contained in:
phil 2023-11-21 07:46:11 +01:00
parent 64a12f24c2
commit 7a2ff6c74a
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
templates/postfix/main.cf.j2
View file

@ -41,8 +41,8 @@ smtpd_tls_key_file = {{ postfix_smtpd_tls_key_file }}
smtpd_tls_ciphers = medium smtpd_tls_ciphers = medium
smtpd_tls_mandatory_ciphers = medium smtpd_tls_mandatory_ciphers = medium
smtpd_tls_exclude_ciphers = aNULL, eNULL, MD5, DES, 3DES, DES-CBC3-SHA, RC4-SHA, AES256-SHA, AES128-SHA, DHE-RSA-AES256-SHA smtpd_tls_exclude_ciphers = aNULL, eNULL, MD5, DES, 3DES, DES-CBC3-SHA, RC4-SHA, AES256-SHA, AES128-SHA, DHE-RSA-AES256-SHA
smtpd_tls_mandatory_protocols = >=TLSv1.1 smtpd_tls_mandatory_protocols = >=TLSv1
smtpd_tls_protocols = >=TLSv1.1 smtpd_tls_protocols = >=TLSv1
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_tls_session_cache_timeout = 7200s smtpd_tls_session_cache_timeout = 7200s
smtpd_tls_loglevel = 1 smtpd_tls_loglevel = 1
@ -57,7 +57,7 @@ smtp_tls_security_level = dane
smtp_dns_support_level = dnssec smtp_dns_support_level = dnssec
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtp_tls_session_cache_timeout = 7200s smtp_tls_session_cache_timeout = 7200s
smtp_tls_protocols = >=TLSv1.1 smtp_tls_protocols = >=TLSv1
{% if postfix_smtp_tls_policy_maps is defined %} {% if postfix_smtp_tls_policy_maps is defined %}
smtp_tls_policy_maps = smtp_tls_policy_maps =
{% for map in postfix_smtp_tls_policy_maps %} {% for map in postfix_smtp_tls_policy_maps %}