From: Ivan Rako <irako@nekkar.carnet.hr>
Date: Mon, 21 Dec 2009 13:49:15 +0000 (+0100)
Subject: weak ssl ciphers
X-Git-Tag: debian/1.2.15-1~5
X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?a=commitdiff_plain;h=refs%2Fheads%2Flenny;p=dovecot-cn.git

weak ssl ciphers
---

diff --git a/debian/changelog b/debian/changelog
index b5c392e..55e1539 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+dovecot-cn (1:1.0.15-2lenny2) stable; urgency=medium
+
+  * Postavlja ssl_cipher_list
+
+ -- Ivan Rako <Ivan.Rako@CARNet.hr>  Mon, 21 Dec 2009 13:30:52 +0100
+
 dovecot-cn (1:1.0.15-2lenny1) stable; urgency=medium
 
   * Prva verzija za lenny
diff --git a/debian/postinst b/debian/postinst
index 25e9f5a..1bdbdfa 100755
--- a/debian/postinst
+++ b/debian/postinst
@@ -48,6 +48,10 @@ cp_check_and_sed '^mail_extra_groups' \
                  's/^mail_extra_groups/mail_privileged_group/g' \
 		 /etc/dovecot/dovecot.conf || true
 
+cp_check_and_sed '#ssl_cipher_list' \
+                 's/#ssl_cipher_list.*/ssl_cipher_list = ALL:!aNULL:!eNULL:!ADH!LOW:!MEDIUM:!EXP:!SSLv2:HIGH/g' \
+		 /etc/dovecot/dovecot.conf || true
+
 
 # restart 
 if [ -x /usr/sbin/invoke-rc.d ]; then