Ssl2 + ssl3 disable: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
| Zeile 1: | Zeile 1: | ||
*[[Apache2 SSLv3 deactivate]] | *[[Apache2 SSLv3 deactivate]] | ||
| + | *[[Dovecot SSLv3 deactivate]] | ||
| − | |||
| − | |||
| − | |||
=Postfix SSLv3 deactivate= | =Postfix SSLv3 deactivate= | ||
Version vom 6. November 2018, 14:38 Uhr
Postfix SSLv3 deactivate
- cat /etc/postfix/main.cf
smtpd_tls_mandatory_protocols = !SSLv2 !SSLv3 smtp_tls_mandatory_protocols = !SSLv2 !SSLv3 smtp_tls_protocols = !SSLv2, !SSLv3 smtpd_tls_protocols = !SSLv2 !SSLv3
Tests
Apache2
- openssl s_client -ssl3 -connect www.example.com:443
Dovecot
- openssl s_client -ssl3 -connect www.example.com:993
Postfix
smtps
- openssl s_client -ssl3 -connect www.example.com:465
submission
- openssl s_client -ssl3 -connect www.example.com:587
Openldap(test)
- cat tls-min.ldif
dn: cn=config changetype: modify replace: olcTLSProtocolMin olcTLSProtocolMin: 3.2
- ldapmodify -Y EXTERNAL -H ldapi:/// -f tls-min.ldif