disable SSLv2,3 client-side too #24

This commit is contained in:
Aaron Zauner 2016-03-29 19:02:00 +02:00
parent 1d37e94e17
commit 0ba508ee2d

View file

@ -82,7 +82,10 @@ class PostfixConfigGenerator:
# Disable SSLv2 and SSLv3. Syntax for `smtp_tls_protocols` changed
# between Postfix version 2.5 and 2.6, since we only support => 2.11
# we don't use nor support legacy Postfix syntax.
# - Server:
self.ensure_cf_var("smtp_tls_protocols", "!SSLv2, !SSLv3", [])
# - Client:
self.ensure_cf_var("smtp_tls_mandatory_protocols", "!SSLv2, !SSLv3", [])
def maybe_add_config_lines(self):
if not self.additions: