Disabled SSLv3 by default. Obvious fix.

This commit is contained in:
William David Haines 2020-04-27 14:00:54 -06:00
parent 8a450e878f
commit 315c8c658c
3 changed files with 9 additions and 1 deletions

View File

@ -2,6 +2,10 @@
This file is used to list changes made in each version of the postfix cookbook. This file is used to list changes made in each version of the postfix cookbook.
## 5.3.2 (2020-04-27)
- Disabled SSLv3 by default
## 5.3.1 (2018-07-24) ## 5.3.1 (2018-07-24)
- Fixed sbin issue with Chef13 - Fixed sbin issue with Chef13

View File

@ -88,6 +88,10 @@ default['postfix']['main']['myorigin'] = '$myhostname'
default['postfix']['main']['mydestination'] = [node['postfix']['main']['myhostname'], node['hostname'], 'localhost.localdomain', 'localhost'].compact default['postfix']['main']['mydestination'] = [node['postfix']['main']['myhostname'], node['hostname'], 'localhost.localdomain', 'localhost'].compact
default['postfix']['main']['smtpd_use_tls'] = 'yes' default['postfix']['main']['smtpd_use_tls'] = 'yes'
default['postfix']['main']['smtp_use_tls'] = 'yes' default['postfix']['main']['smtp_use_tls'] = 'yes'
default['postfix']['main']['smtpd_tls_mandatory_protocols'] = '!SSLv2,!SSLv3'
default['postfix']['main']['smtp_tls_mandatory_protocols'] = '!SSLv2,!SSLv3'
default['postfix']['main']['smtpd_tls_mandatory_protocols'] = '!SSLv2,!SSLv3'
default['postfix']['main']['smtp_tls_mandatory_protocols'] = '!SSLv2,!SSLv3'
default['postfix']['main']['smtp_sasl_auth_enable'] = 'no' default['postfix']['main']['smtp_sasl_auth_enable'] = 'no'
default['postfix']['main']['mailbox_size_limit'] = 0 default['postfix']['main']['mailbox_size_limit'] = 0
default['postfix']['main']['mynetworks'] = nil default['postfix']['main']['mynetworks'] = nil

View File

@ -3,7 +3,7 @@ maintainer 'Chef Software, Inc.'
maintainer_email 'cookbooks@chef.io' maintainer_email 'cookbooks@chef.io'
license 'Apache-2.0' license 'Apache-2.0'
description 'Installs and configures postfix for client or outbound relayhost, or to do SASL auth' description 'Installs and configures postfix for client or outbound relayhost, or to do SASL auth'
version '5.3.1' version '5.3.2'
%w(ubuntu debian redhat centos amazon oracle scientific smartos fedora freebsd).each do |os| %w(ubuntu debian redhat centos amazon oracle scientific smartos fedora freebsd).each do |os|
supports os supports os