diff src/login-common/ssl-proxy-openssl.c @ 4696:abf9a1234b99 HEAD

Don't allow SSLv2 by default.
author Timo Sirainen <tss@iki.fi>
date Mon, 16 Oct 2006 01:10:30 +0300
parents 07afd19bc53e
children db7983ff23b8
line wrap: on
line diff
--- a/src/login-common/ssl-proxy-openssl.c	Mon Oct 16 01:07:10 2006 +0300
+++ b/src/login-common/ssl-proxy-openssl.c	Mon Oct 16 01:10:30 2006 +0300
@@ -22,7 +22,7 @@
 #include <openssl/err.h>
 #include <openssl/rand.h>
 
-#define DOVECOT_SSL_DEFAULT_CIPHER_LIST "ALL:!LOW"
+#define DOVECOT_SSL_DEFAULT_CIPHER_LIST "ALL:!LOW:!SSLv2"
 /* Check every 30 minutes if parameters file has been updated */
 #define SSL_PARAMFILE_CHECK_INTERVAL (60*30)