weak ssl ciphers

[dovecot-cn.git] / debian / postinst

diff --git a/debian/postinst b/debian/postinst
index 60e38cc..1bdbdfa 100755 (executable)
--- a/debian/postinst
+++ b/debian/postinst
@@ -44,8 +44,12 @@ cp_check_and_sed '#quota = maildir' \
                 /etc/dovecot/dovecot.conf || true
 
 # dodano zbog backward compatibility (etch->lenny)
-cp_check_and_sed 'mail_extra_groups' \
-                 's/mail_extra_groups/mail_privileged_group/g' \
+cp_check_and_sed '^mail_extra_groups' \
+                 's/^mail_extra_groups/mail_privileged_group/g' \
+                /etc/dovecot/dovecot.conf || true
+
+cp_check_and_sed '#ssl_cipher_list' \
+                 's/#ssl_cipher_list.*/ssl_cipher_list = ALL:!aNULL:!eNULL:!ADH!LOW:!MEDIUM:!EXP:!SSLv2:HIGH/g' \
                 /etc/dovecot/dovecot.conf || true