X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?a=blobdiff_plain;f=debian%2Fpostinst;h=80c04dcc2a48cdef3105ccbae5701c8504fb2bf4;hb=ec953e860d0905cf3827b085a1b4f593d75128cf;hp=868dad43a8b7589623b2aa16ce5b5a3f9ba36361;hpb=83c59ff2f6f893e986abcec3b8ba20682ec906de;p=postfix-cn.git

diff --git a/debian/postinst b/debian/postinst
index 868dad4..80c04dc 100755
--- a/debian/postinst
+++ b/debian/postinst
@@ -288,6 +288,10 @@ postconf -e smtpd_tls_key_file="\$smtpd_tls_cert_file"
 postconf -e smtpd_tls_session_cache_database="sdbm:/var/lib/postfix/smtpd_scache"
 postconf -e smtpd_tls_session_cache_timeout="3600s"
 postconf -e tls_random_source="dev:/dev/urandom"
+postconf -e smtpd_tls_mandatory_protocols="SSLv3, TLSv1"
+postconf -e smtpd_tls_mandatory_ciphers="medium, high"
+postconf -e smtpd_tls_exclude_ciphers="aNULL"
+postconf -e smtpd_tls_mandatory_exclude_ciphers="aNULL"
 # ako je postavljen neki drugi certifikat, ne diraj
 smtp_tls_cert_file="`postconf -h smtp_tls_cert_file`"
 if [ -z "$smtp_tls_cert_file" ]; then