diff -Nur smeserver-qpsmtpd-2.6.0.old/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_ciphers/10ciphers smeserver-qpsmtpd-2.6.0/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_ciphers/10ciphers --- smeserver-qpsmtpd-2.6.0.old/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_ciphers/10ciphers 2016-02-05 18:28:23.000000000 -0500 +++ smeserver-qpsmtpd-2.6.0/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_ciphers/10ciphers 2020-05-02 21:48:35.133000000 -0400 @@ -1,5 +1,5 @@ { # When updating CipherSuite both e-smith-apache and smeserver-qpsmtpd templates should be updated. - return $qpsmtpd{tlsCipher} || $modSSL{CipherSuite} || 'HIGH:!SSLv2:!ADH:!aNULL:!MD5:!RC4'; + return $qpsmtpd{tlsCipher} || $modSSL{CipherSuite} || 'ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:HIGH@STRENGTH:!SSLv2:!ADH:!aNULL:!MD5:!RC4'; } diff -Nur smeserver-qpsmtpd-2.6.0.old/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_protocols/10protocols smeserver-qpsmtpd-2.6.0/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_protocols/10protocols --- smeserver-qpsmtpd-2.6.0.old/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_protocols/10protocols 2016-02-05 18:28:25.000000000 -0500 +++ smeserver-qpsmtpd-2.6.0/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_protocols/10protocols 2020-05-02 21:47:49.922000000 -0400 @@ -2,5 +2,7 @@ $OUT .= 'SSLv23'; $OUT .= ':!SSLv2' unless ($qpsmtpd{SSLv2} || 'disabled') eq 'enabled'; $OUT .= ':!SSLv3' unless ($qpsmtpd{SSLv3} || 'disabled') eq 'enabled'; $OUT .= ':!TLSv1' unless ($qpsmtpd{TLSv1} || 'enabled') eq 'enabled'; +$OUT .= ':!TLSv1.1' unless ($qpsmtpd{TLSv1.1} || 'enabled') eq 'enabled'; +$OUT .= ':!TLSv1.2' unless ($qpsmtpd{TLSv1.2} || 'enabled') eq 'enabled'; }