/[smeserver]/rpms/smeserver-qpsmtpd/sme10/smeserver-qpsmtpd-2.6.0-bz10460-better-Cipher-and-Protocol.patch
ViewVC logotype

Contents of /rpms/smeserver-qpsmtpd/sme10/smeserver-qpsmtpd-2.6.0-bz10460-better-Cipher-and-Protocol.patch

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph

Revision 1.3 - (show annotations) (download)
Wed Dec 16 16:49:08 2020 UTC (3 years, 10 months ago) by jcrisp
Branch: MAIN
CVS Tags: HEAD
Changes since 1.2: +0 -0 lines
FILE REMOVED 
Initial import
1 diff -Nur smeserver-qpsmtpd-2.6.0.old/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_ciphers/10ciphers smeserver-qpsmtpd-2.6.0/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_ciphers/10ciphers
2 --- smeserver-qpsmtpd-2.6.0.old/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_ciphers/10ciphers 2016-02-05 18:28:23.000000000 -0500
3 +++ smeserver-qpsmtpd-2.6.0/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_ciphers/10ciphers 2020-05-02 21:48:35.133000000 -0400
4 @@ -1,5 +1,5 @@
5 {
6 # When updating CipherSuite both e-smith-apache and smeserver-qpsmtpd templates should be updated.
7 - return $qpsmtpd{tlsCipher} || $modSSL{CipherSuite} || 'HIGH:!SSLv2:!ADH:!aNULL:!MD5:!RC4';
8 + return $qpsmtpd{tlsCipher} || $modSSL{CipherSuite} || 'ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:HIGH@STRENGTH:!SSLv2:!ADH:!aNULL:!MD5:!RC4';
9 }
10
11 diff -Nur smeserver-qpsmtpd-2.6.0.old/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_protocols/10protocols smeserver-qpsmtpd-2.6.0/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_protocols/10protocols
12 --- smeserver-qpsmtpd-2.6.0.old/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_protocols/10protocols 2016-02-05 18:28:25.000000000 -0500
13 +++ smeserver-qpsmtpd-2.6.0/root/etc/e-smith/templates/var/service/qpsmtpd/config/tls_protocols/10protocols 2020-05-02 21:47:49.922000000 -0400
14 @@ -2,5 +2,7 @@
15 $OUT .= 'SSLv23';
16 $OUT .= ':!SSLv2' unless ($qpsmtpd{SSLv2} || 'disabled') eq 'enabled';
17 $OUT .= ':!SSLv3' unless ($qpsmtpd{SSLv3} || 'disabled') eq 'enabled';
18 $OUT .= ':!TLSv1' unless ($qpsmtpd{TLSv1} || 'enabled') eq 'enabled';
19 +$OUT .= ':!TLSv1.1' unless ($qpsmtpd{TLSv1.1} || 'enabled') eq 'enabled';
20 +$OUT .= ':!TLSv1.2' unless ($qpsmtpd{TLSv1.2} || 'enabled') eq 'enabled';
21 }
admin@koozali.org
 ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed