Merge pull request #27 from EFForg/azet/disable-v2-v3

disable SSLv2,3 client-side too #24
This commit is contained in:
Peter Eckersley 2016-03-29 10:12:48 -07:00
commit c7a8d1cb7a

View file

@ -82,7 +82,10 @@ class PostfixConfigGenerator:
# Disable SSLv2 and SSLv3. Syntax for `smtp_tls_protocols` changed
# between Postfix version 2.5 and 2.6, since we only support => 2.11
# we don't use nor support legacy Postfix syntax.
# - Server:
self.ensure_cf_var("smtp_tls_protocols", "!SSLv2, !SSLv3", [])
# - Client:
self.ensure_cf_var("smtp_tls_mandatory_protocols", "!SSLv2, !SSLv3", [])
def maybe_add_config_lines(self):
if not self.additions: