From 31ef7a78bc78a6ce2a24bcc6a4a11574bb2d5483 Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Mon, 3 Dec 2018 03:31:01 +0100 Subject: Upgrade webmail baseline to Debian Stretch. --- roles/webmail/files/etc/stunnel/ldap.conf | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'roles/webmail/files/etc/stunnel/ldap.conf') diff --git a/roles/webmail/files/etc/stunnel/ldap.conf b/roles/webmail/files/etc/stunnel/ldap.conf index 1149bce..b8c7787 100644 --- a/roles/webmail/files/etc/stunnel/ldap.conf +++ b/roles/webmail/files/etc/stunnel/ldap.conf @@ -31,7 +31,7 @@ socket = r:TCP_NODELAY=1 verify = 4 ; Disable support for insecure protocols -options = NO_SSLv2 +;options = NO_SSLv2 options = NO_SSLv3 options = NO_TLSv1 options = NO_TLSv1.1 @@ -39,8 +39,8 @@ options = NO_TLSv1.1 options = NO_COMPRESSION ; These options provide additional security at some performance degradation -options = SINGLE_ECDH_USE -options = SINGLE_DH_USE +;options = SINGLE_ECDH_USE +;options = SINGLE_DH_USE ; Select permitted SSL ciphers ciphers = EECDH+AESGCM:!MEDIUM:!LOW:!EXP:!aNULL:!eNULL -- cgit v1.2.3