diff -Nur e-smith-pop3-2.4.0/root/etc/e-smith/templates/var/service/pop3s/stunnel.conf/10ssl e-smith-pop3-2.4.0_bz9169/root/etc/e-smith/templates/var/service/pop3s/stunnel.conf/10ssl --- e-smith-pop3-2.4.0/root/etc/e-smith/templates/var/service/pop3s/stunnel.conf/10ssl 2016-01-07 18:36:50.553778039 +0100 +++ e-smith-pop3-2.4.0_bz9169/root/etc/e-smith/templates/var/service/pop3s/stunnel.conf/10ssl 2016-01-07 18:38:01.045776074 +0100 @@ -1,6 +1,11 @@ cert = /service/imap/ssl/imapd.pem sslVersion = all -options = NO_SSLv2 -options = NO_SSLv3 -options = NO_TLSv1 +{ + +$OUT .= "# SSL protocols can be set with DB props SSLv2, SSLv3 and TLSv1\n"; +$OUT .= "options = NO_SSLv2\n" unless ($pop3s{SSLv2} || 'disabled') eq 'enabled'; +$OUT .= "options = NO_SSLv3\n" unless ($pop3s{SSLv3} || 'disabled') eq 'enabled'; +$OUT .= "options = NO_TLSv1\n" unless ($pop3s{TLSv1} || 'enabled') eq 'enabled'; + +} fips = no