From: Arkadiusz Miśkiewicz Date: Mon, 20 Dec 2021 16:17:20 +0000 (+0100) Subject: Activate, too. rt#brak X-Git-Tag: auto/th/exim-4.95-3~1 X-Git-Url: http://git.pld-linux.org/gitweb.cgi?a=commitdiff_plain;h=f0ac4d017cbd9c4d8a958c0440c53eb815cef28c;p=packages%2Fexim.git Activate, too. rt#brak --- diff --git a/exim4.conf b/exim4.conf index 1fb49f3..91707da 100644 --- a/exim4.conf +++ b/exim4.conf @@ -172,8 +172,8 @@ tls_advertise_hosts = # sane defaults # https://ssl-config.mozilla.org/#server=exim&version=4.93&config=intermediate&openssl=1.1.1k&guideline=5.6 -# tls_require_ciphers = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 -# openssl_options = +no_sslv2 +no_sslv3 +no_tlsv1 +no_tlsv1_1 +no_compression +tls_require_ciphers = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 +openssl_options = +no_sslv2 +no_sslv3 +no_tlsv1 +no_tlsv1_1 +no_compression # Specify the domain you want to be added to all unqualified addresses # here. An unqualified address is one that does not contain an "@" character