Differences between revisions 6 and 7

postfix

Crypto

   1 ### Cipherlists
   2 #tls_export_cipherlist = aNULL:-aNULL:ALL:+RC4:@STRENGTH
   3 #tls_high_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:!MEDIUM:+RC4:@STRENGTH
   4 #tls_low_cipherlist = aNULL:-aNULL:ALL:!EXPORT:+RC4:@STRENGTH
   5 #tls_medium_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:+RC4:@STRENGTH
   6 #tls_null_cipherlist = eNULL:!aNULL
   7 
   8 
   9 ### LMTP Client
  10 #lmtp_enforce_tls (default: no)
  11 #lmtp_sasl_tls_security_options (default: $lmtp_sasl_security_options)
  12 #lmtp_sasl_tls_verified_security_options (default: $lmtp_sasl_tls_security_options)
  13 #lmtp_starttls_timeout (default: 300s)
  14 #lmtp_tls_CAfile (default: empty)
  15 #lmtp_tls_CApath (default: empty)
  16 #lmtp_tls_block_early_mail_reply (default: empty)
  17 #lmtp_tls_cert_file (default: empty)
  18 #lmtp_tls_ciphers (default: export)
  19 lmtp_tls_ciphers = high
  20 #lmtp_tls_dcert_file (default: empty)
  21 #lmtp_tls_dkey_file (default: $lmtp_tls_dcert_file)
  22 #lmtp_tls_eccert_file (default: empty)
  23 #lmtp_tls_eckey_file (default: empty)
  24 #lmtp_tls_enforce_peername (default: yes)
  25 #lmtp_tls_exclude_ciphers (default: empty)
  26 lmtp_tls_exclude_ciphers = RC4
  27 #lmtp_tls_fingerprint_cert_match (default: empty)
  28 #lmtp_tls_fingerprint_digest (default: md5)
  29 lmtp_tls_fingerprint_digest = sha1
  30 #lmtp_tls_force_insecure_host_tlsa_lookup (default: no)
  31 #lmtp_tls_key_file (default: $lmtp_tls_cert_file)
  32 #lmtp_tls_loglevel (default: 0)
  33 #lmtp_tls_mandatory_ciphers (default: empty)
  34 lmtp_tls_mandatory_ciphers = high
  35 #lmtp_tls_mandatory_exclude_ciphers (default: empty)
  36 lmtp_tls_mandatory_exclude_ciphers = RC4
  37 #lmtp_tls_mandatory_protocols (default: !SSLv2)
  38 lmtp_tls_mandatory_protocols  = !SSLv2,!SSLv3,!TLSv1.0
  39 #lmtp_tls_note_starttls_offer (default: no)
  40 #lmtp_tls_per_site (default: empty)
  41 #lmtp_tls_policy_maps (default: empty)
  42 #lmtp_tls_protocols (default: empty)
  43 lmtp_tls_protocols = !SSLv2,!SSLv3,!TLSv1.0
  44 #lmtp_tls_scert_verifydepth (default: 9)
  45 #lmtp_tls_secure_cert_match (default: nexthop)
  46 #lmtp_tls_security_level (default: empty)
  47 # possible values:      none, may, encrypt, dane, dane-only,
  48 #                       fingerprint, verify, secure
  49 lmtp_tls_security_level = may
  50 #lmtp_tls_session_cache_database (default: empty)
  51 #lmtp_tls_session_cache_timeout (default: 3600s)
  52 #lmtp_tls_trust_anchor_file (default: empty)
  53 #lmtp_tls_verify_cert_match (default: hostname)
  54 #lmtp_use_tls (default: no) <- deprecaded with 2.3 -> smtpd_tls_security_level
  55 
  56 
  57 ### SMTP Client
  58 #smtp_enforce_tls (default: no)
  59 #smtp_sasl_tls_security_options (default: $smtp_sasl_security_options)
  60 #smtp_sasl_tls_verified_security_options (default: $smtp_sasl_tls_security_options)
  61 #smtp_starttls_timeout (default: 300s)
  62 #smtp_tls_CAfile (default: empty)
  63 #smtp_tls_CApath (default: empty)
  64 #smtp_tls_block_early_mail_reply (default: no)
  65 #smtp_tls_cert_file (default: empty)
  66 #smtp_tls_cipherlist (default: empty) <- obsolete
  67 #smtp_tls_ciphers (default: export)
  68 smtp_tls_ciphers = high
  69 #smtp_tls_dcert_file (default: empty)
  70 #smtp_tls_dkey_file (default: $smtp_tls_dcert_file)
  71 #smtp_tls_eccert_file (default: empty)
  72 #smtp_tls_eckey_file (default: $smtp_tls_eccert_file)
  73 #smtp_tls_enforce_peername (default: yes)
  74 #smtp_tls_exclude_ciphers (default: empty)
  75 smtp_tls_exclude_ciphers = RC4
  76 #smtp_tls_fingerprint_cert_match (default: empty)
  77 #smtp_tls_fingerprint_digest (default: md5)
  78 smtp_tls_fingerprint_digest = sha1
  79 #smtp_tls_force_insecure_host_tlsa_lookup (default: no)
  80 #smtp_tls_key_file (default: $smtp_tls_cert_file)
  81 #smtp_tls_loglevel (default: 0)
  82 #smtp_tls_mandatory_ciphers (default: medium)
  83 smtp_tls_mandatory_ciphers = high
  84 #smtp_tls_mandatory_exclude_ciphers (default: empty)
  85 smtp_tls_mandatory_exclude_ciphers = RC4
  86 #smtp_tls_mandatory_protocols (default: !SSLv2)
  87 smtp_tls_mandatory_protocols = !SSLv2,!SSLv3,!TLSv1.0
  88 #smtp_tls_note_starttls_offer (default: no)
  89 #smtp_tls_per_site (default: empty)
  90 #smtp_tls_policy_maps (default: empty)
  91 #smtp_tls_protocols (default: !SSLv2)
  92 smtp_tls_protocols = !SSLv2,!SSLv3,!TLSv1.0
  93 #smtp_tls_scert_verifydepth (default: 9)
  94 #smtp_tls_secure_cert_match (default: nexthop, dot-nexthop)
  95 #smtp_tls_security_level (default: empty)
  96 # possible values:      none, may, encrypt, dane, dane-only,
  97 #                       fingerprint, verify, secure
  98 smtp_tls_security_level = may
  99 #smtp_tls_session_cache_database (default: empty)
 100 #smtp_tls_session_cache_timeout (default: 3600s)
 101 #smtp_tls_trust_anchor_file (default: empty)
 102 #smtp_tls_verify_cert_match (default: hostname)
 103 #smtp_use_tls (default: no) <- deprecaded with 2.3 -> smtp_tls_security_level
 104 
 105 
 106 
 107 ### SMTPD Server
 108 #smtpd_client_new_tls_session_rate_limit (default: 0)
 109 #smtpd_enforce_tls (default: no)
 110 #smtpd_sasl_tls_security_options (default: $smtpd_sasl_security_options)
 111 #smtpd_starttls_timeout (default: see postconf -d output)
 112 #smtpd_tls_CAfile (default: empty)
 113 #smtpd_tls_CApath (default: empty)
 114 #smtpd_tls_always_issue_session_ids (default: yes)
 115 #smtpd_tls_ask_ccert (default: no)
 116 #smtpd_tls_auth_only (default: no)
 117 #smtpd_tls_ccert_verifydepth (default: 9)
 118 #smtpd_tls_cert_file (default: empty)
 119 #smtpd_tls_cipherlist (default: empty) <- obsolete
 120 #smtpd_tls_ciphers (default: export)
 121 smtpd_tls_ciphers = high
 122 #smtpd_tls_dcert_file (default: empty)
 123 #smtpd_tls_dh1024_param_file (default: empty)
 124 #smtpd_tls_dh512_param_file (default: empty)
 125 #smtpd_tls_dkey_file (default: $smtpd_tls_dcert_file)
 126 #smtpd_tls_eccert_file (default: empty)
 127 #smtpd_tls_eckey_file (default: $smtpd_tls_eccert_file)
 128 #smtpd_tls_eecdh_grade (default: see postconf -d output)
 129 #smtpd_tls_exclude_ciphers (default: empty)
 130 smtpd_tls_exclude_ciphers = RC4
 131 #smtpd_tls_fingerprint_digest (default: md5)
 132 smtpd_tls_fingerprint_digest = sha1
 133 #smtpd_tls_key_file (default: $smtpd_tls_cert_file)
 134 #smtpd_tls_loglevel (default: 0)
 135 #smtpd_tls_mandatory_ciphers (default: medium)
 136 smtpd_tls_mandatory_ciphers = high
 137 #smtpd_tls_mandatory_exclude_ciphers (default: empty)
 138 smtpd_tls_mandatory_exclude_ciphers = RC4
 139 #smtpd_tls_mandatory_protocols (default: !SSLv2)
 140 smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3,!TLSv1.0
 141 #smtpd_tls_protocols (default: none)
 142 smtpd_tls_protocols=!SSLv2,!SSLv3,!TLSv1.0
 143 #smtpd_tls_received_header (default: no)
 144 #smtpd_tls_req_ccert (default: no)
 145 #smtpd_tls_security_level (default: empty)
 146 # possible values:      none, may, encrypt
 147 smtpd_tls_security_level = may
 148 #smtpd_tls_session_cache_database (default: empty)
 149 #smtpd_tls_session_cache_timeout (default: 3600s)
 150 #smtpd_tls_wrappermode (default: no)
 151 #smtpd_use_tls (default: no) <- deprecaded with 2.3 -> smtpd_tls_security_level

-  ⇤ ← Revision 6 as of 2016-01-12 20:43:35 → 
  Size: 6370
  Editor: RockStable
  Comment:
+   ← Revision 7 as of 2016-01-12 20:50:49 → ⇥
  Size: 6579
  Editor: RockStable
  Comment:
-Deletions are marked like this.
+Additions are marked like this.
 Line 34:
+lmtp_tls_fingerprint_digest = sha1
-Line 58:
+Line 59:
-#lmtp_use_tls (default: no)
+#lmtp_use_tls (default: no) <- deprecaded with 2.3 -> smtpd_tls_security_level
-Line 82:
+Line 83:
+smtp_tls_fingerprint_digest = sha1
-Line 101:
+Line 103:
+smtp_tls_security_level = may
-Line 105:
+Line 108:
-#smtp_use_tls (default: no) <- opportunistic mode
smtp_use_tls = yes
+#smtp_use_tls (default: no) <- deprecaded with 2.3 -> smtp_tls_security_level
-Line 134:
+Line 137:
+smtpd_tls_fingerprint_digest = sha1
-Line 152:
+Line 156:
-#smtpd_use_tls (default: no) <- opportunistic mode
smtpd_use_tls = yes
+#smtpd_use_tls (default: no) <- deprecaded with 2.3 -> smtpd_tls_security_level

Configurations

Services

Sports

Navigation

postfix

Crypto