weak ssl ciphers

[dovecot-cn.git] / debian / postinst

diff --git a/debian/postinst b/debian/postinst
index 25e9f5a..1bdbdfa 100755 (executable)
--- a/debian/postinst
+++ b/debian/postinst
@@ -48,6 +48,10 @@ cp_check_and_sed '^mail_extra_groups' \
                  's/^mail_extra_groups/mail_privileged_group/g' \
                 /etc/dovecot/dovecot.conf || true
 
+cp_check_and_sed '#ssl_cipher_list' \
+                 's/#ssl_cipher_list.*/ssl_cipher_list = ALL:!aNULL:!eNULL:!ADH!LOW:!MEDIUM:!EXP:!SSLv2:HIGH/g' \
+                /etc/dovecot/dovecot.conf || true
+
 
 # restart 
 if [ -x /usr/sbin/invoke-rc.d ]; then