summaryrefslogtreecommitdiffstats
path: root/roles/webmail
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2015-10-27 16:27:31 +0100
committerGuilhem Moulin <guilhem@fripost.org>2015-10-27 16:27:31 +0100
commit6cb5b8fdc6e2cd4cbb47f45be01b05de2c8269d9 (patch)
tree1932112c24fbc4a364d4fb53e2a7d213f9af7eb1 /roles/webmail
parentc2b9d04ecef5babc028728d4426aab9237b5ce86 (diff)
Roundcube managesieve SSL options: use AESGCM and disable compression.
Diffstat (limited to 'roles/webmail')
-rw-r--r--roles/webmail/files/etc/roundcube/plugins/managesieve/config.inc.php6
1 files changed, 4 insertions, 2 deletions
diff --git a/roles/webmail/files/etc/roundcube/plugins/managesieve/config.inc.php b/roles/webmail/files/etc/roundcube/plugins/managesieve/config.inc.php
index 1423610..8e4b454 100644
--- a/roles/webmail/files/etc/roundcube/plugins/managesieve/config.inc.php
+++ b/roles/webmail/files/etc/roundcube/plugins/managesieve/config.inc.php
@@ -33,9 +33,11 @@ $config['managesieve_usetls'] = false;
// The example below enables server certificate validation
$config['managesieve_conn_options'] = array(
'ssl' => array(
- 'verify_peer' => true,
+ 'verify_peer' => true,
'verify_depth' => 3,
- 'cafile' => '/etc/stunnel/certs/imap.fripost.org.pem',
+ 'cafile' => '/etc/stunnel/certs/imap.fripost.org.pem',
+ 'disable_compression' => true,
+ 'ciphers' => 'EECDH+AESGCM:!MEDIUM:!LOW:!EXP:!aNULL:!eNULL',
),
);