Ssl2 + ssl3 disable

• Apache2 SSLv3 deactivate
• Dovecot SSLv3 deactivate

• Postfix SSLv3 deactivate

Tests

Apache2

• openssl s_client -ssl3 -connect www.example.com:443

Dovecot

• openssl s_client -ssl3 -connect www.example.com:993

Postfix

smtps

• openssl s_client -ssl3 -connect www.example.com:465

submission

• openssl s_client -ssl3 -connect www.example.com:587

Openldap(test)

• cat tls-min.ldif

dn: cn=config
changetype: modify
replace: olcTLSProtocolMin
olcTLSProtocolMin: 3.2

• ldapmodify -Y EXTERNAL -H ldapi:/// -f tls-min.ldif

Source

• https://www.heinlein-support.de/blog/security/deaktivieren-sie-sslv3-apachepostfixdovecot-poodle-bug/
• https://wiki.dovecot.org/SSL/DovecotConfiguration