From 9ee1e6893c0c1096acfe8e7116fcf361253070f7 Mon Sep 17 00:00:00 2001 From: Ivan Rako Date: Mon, 21 Dec 2009 14:49:15 +0100 Subject: [PATCH] weak ssl ciphers --- debian/changelog | 6 ++++++ debian/postinst | 4 ++++ 2 files changed, 10 insertions(+) diff --git a/debian/changelog b/debian/changelog index b5c392e..55e1539 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +dovecot-cn (1:1.0.15-2lenny2) stable; urgency=medium + + * Postavlja ssl_cipher_list + + -- Ivan Rako Mon, 21 Dec 2009 13:30:52 +0100 + dovecot-cn (1:1.0.15-2lenny1) stable; urgency=medium * Prva verzija za lenny diff --git a/debian/postinst b/debian/postinst index 25e9f5a..1bdbdfa 100755 --- a/debian/postinst +++ b/debian/postinst @@ -48,6 +48,10 @@ cp_check_and_sed '^mail_extra_groups' \ 's/^mail_extra_groups/mail_privileged_group/g' \ /etc/dovecot/dovecot.conf || true +cp_check_and_sed '#ssl_cipher_list' \ + 's/#ssl_cipher_list.*/ssl_cipher_list = ALL:!aNULL:!eNULL:!ADH!LOW:!MEDIUM:!EXP:!SSLv2:HIGH/g' \ + /etc/dovecot/dovecot.conf || true + # restart if [ -x /usr/sbin/invoke-rc.d ]; then -- 1.7.10.4