Disallowing SSLv2

Rosenbaum, Larry M. rosenbaumlm at ornl.gov
Fri Jun 4 11:19:35 EDT 2010


> From: Raphael Jaffey [mailto:rjaffey at artic.edu]
> Sent: Friday, June 04, 2010 10:42 AM
> To: Lorenzo Marcantonio
> Cc: Rosenbaum, Larry M.; info-cyrus at lists.andrew.cmu.edu
> Subject: Re: Disallowing SSLv2
> 
> 
> 
> Lorenzo Marcantonio wrote:
> > On Fri, 4 Jun 2010, Rosenbaum, Larry M. wrote:
> >
> >> How do I tell Cyrus IMAP to not allow SSLv2?
> >
> > I used this in imapd.conf:
> >
> > tls_cipher_list: ALL:!ADH:!EXP:!MD5:!LOW
> >
> 
> You need to add !SSLv2 to your example to get the desired effect:
> 
> tls_cipher_list: ALL:!SSLv2:!ADH:!EXP:!MD5:!LOW

Thanks!
Larry


More information about the Info-cyrus mailing list