Ssl2 + ssl3 disable: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
Zeile 3: Zeile 3:
  
  
=Postfix SSLv3 deactivate=
+
*[[Postfix SSLv3 deactivate]]
*cat /etc/postfix/main.cf
+
 
smtpd_tls_mandatory_protocols = !SSLv2 !SSLv3
 
smtp_tls_mandatory_protocols = !SSLv2 !SSLv3
 
smtp_tls_protocols = !SSLv2, !SSLv3
 
smtpd_tls_protocols = !SSLv2 !SSLv3
 
 
=Tests=
 
=Tests=
 
==Apache2==
 
==Apache2==

Version vom 6. November 2018, 14:39 Uhr


Tests

Apache2

  • openssl s_client -ssl3 -connect www.example.com:443

Dovecot

  • openssl s_client -ssl3 -connect www.example.com:993

Postfix

smtps

  • openssl s_client -ssl3 -connect www.example.com:465

submission

  • openssl s_client -ssl3 -connect www.example.com:587

Openldap(test)

  • cat tls-min.ldif
dn: cn=config
changetype: modify
replace: olcTLSProtocolMin
olcTLSProtocolMin: 3.2
  • ldapmodify -Y EXTERNAL -H ldapi:/// -f tls-min.ldif

Source