Re: [courier-users] Disabling TLS 1.0?

[Matus U. - f. <uh...@fa...>]

On 25.07.18 17:49, Greg Earle wrote:
>Back in the day you could set TLS_PROTOCOL=SSL23 or TLS_PROTOCOL=TLS1.
>
>Are there any newer settings available and if so, when were they 
>introduced?
>
>My organization is getting pressured to disable TLS 1.0 everywhere by 
>next week.
>
>Is it possible to selectively do so in Courier without turning off TLS 
>entirely?

I use:

TLS_PROTOCOL="TLSv1.2:TLSv1.1:TLS1"
TLS_STARTTLS_PROTOCOL="TLSv1.2:TLSv1.1:TLS1"

in imapd-ssl and pop3d-ssl config files. You can of course put them into
smtpd configs too.

-- 
Matus UHLAR - fantomas, uh...@fa... ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"Two words: Windows survives." - Craig Mundie, Microsoft senior strategist
"So does syphillis. Good thing we have penicillin." - Matthew Alton