fripost-ansible/roles/webmail/files/etc/stunnel, branch master Fripost ansible scripts stunnel4: Harden and socket-activate. 2020-05-18T13:51:54+00:00 Guilhem Moulin guilhem@fripost.org 2020-05-18T13:51:54+00:00 42df93debccbcb1a18cd377b6de0b5b20527312f 






AEAD ciphers: Add EECDH+CHACHA20 macro.
2020-05-18T02:34:17+00:00

Guilhem Moulin
guilhem@fripost.org

2020-05-18T02:34:00+00:00

61ba2a2fe12ffd5578429dfe1d354a1c5d16517a

This adds the following two ciphers:

  ECDHE-ECDSA-CHACHA20-POLY1305 TLSv1.2 Kx=ECDH  Au=ECDSA Enc=CHACHA20/POLY1305(256) Mac=AEAD
  ECDHE-RSA-CHACHA20-POLY1305   TLSv1.2 Kx=ECDH  Au=RSA   Enc=CHACHA20/POLY1305(256) Mac=AEAD





This adds the following two ciphers:

  ECDHE-ECDSA-CHACHA20-POLY1305 TLSv1.2 Kx=ECDH  Au=ECDSA Enc=CHACHA20/POLY1305(256) Mac=AEAD
  ECDHE-RSA-CHACHA20-POLY1305   TLSv1.2 Kx=ECDH  Au=RSA   Enc=CHACHA20/POLY1305(256) Mac=AEAD







Upgrade webmail baseline to Debian Stretch.
2018-12-03T02:43:42+00:00

Guilhem Moulin
guilhem@fripost.org

2018-12-03T02:31:01+00:00

31ef7a78bc78a6ce2a24bcc6a4a11574bb2d5483












Use stunnel to secure the connection from the webmail to ldap.fripost.org.
2016-06-05T15:33:25+00:00

Guilhem Moulin
guilhem@fripost.org

2016-06-05T15:30:00+00:00

17d7427e0bc5e61ee10e28cbc5cba5b8a7566d58

We should use IPSec instead, but doing so would force us to weaken
slapd.conf's ‘security’ setting.





We should use IPSec instead, but doing so would force us to weaken
slapd.conf's ‘security’ setting.