weak ssl ciphers

diff --git a/debian/changelog b/debian/changelog
index b5c392e..55e1539 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+dovecot-cn (1:1.0.15-2lenny2) stable; urgency=medium
+
+  * Postavlja ssl_cipher_list
+
+ -- Ivan Rako <Ivan.Rako@CARNet.hr>  Mon, 21 Dec 2009 13:30:52 +0100
+
 dovecot-cn (1:1.0.15-2lenny1) stable; urgency=medium
 
   * Prva verzija za lenny

diff --git a/debian/postinst b/debian/postinst
index 25e9f5a..1bdbdfa 100755 (executable)
--- a/debian/postinst
+++ b/debian/postinst
@@ -48,6 +48,10 @@ cp_check_and_sed '^mail_extra_groups' \
                  's/^mail_extra_groups/mail_privileged_group/g' \
                 /etc/dovecot/dovecot.conf || true
 
+cp_check_and_sed '#ssl_cipher_list' \
+                 's/#ssl_cipher_list.*/ssl_cipher_list = ALL:!aNULL:!eNULL:!ADH!LOW:!MEDIUM:!EXP:!SSLv2:HIGH/g' \
+                /etc/dovecot/dovecot.conf || true
+
 
 # restart 
 if [ -x /usr/sbin/invoke-rc.d ]; then