Merge pull request #160 from willhaines/master

Disabled SSLv3 by default.   Obvious fix.
This commit is contained in:
Lance Albertson 2020-11-23 15:30:13 -08:00 committed by GitHub
commit f12c77725e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 7 additions and 2 deletions

View File

@ -2,8 +2,9 @@
This file is used to list changes made in each version of the postfix cookbook. This file is used to list changes made in each version of the postfix cookbook.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), ## Unreleased
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
- Disabled SSLv3 by default
## 5.4.1 - 2020-10-20 ## 5.4.1 - 2020-10-20

View File

@ -88,6 +88,10 @@ default['postfix']['main']['myorigin'] = '$myhostname'
default['postfix']['main']['mydestination'] = [node['postfix']['main']['myhostname'], node['hostname'], 'localhost.localdomain', 'localhost'].compact default['postfix']['main']['mydestination'] = [node['postfix']['main']['myhostname'], node['hostname'], 'localhost.localdomain', 'localhost'].compact
default['postfix']['main']['smtpd_use_tls'] = 'yes' default['postfix']['main']['smtpd_use_tls'] = 'yes'
default['postfix']['main']['smtp_use_tls'] = 'yes' default['postfix']['main']['smtp_use_tls'] = 'yes'
default['postfix']['main']['smtpd_tls_mandatory_protocols'] = '!SSLv2,!SSLv3'
default['postfix']['main']['smtp_tls_mandatory_protocols'] = '!SSLv2,!SSLv3'
default['postfix']['main']['smtpd_tls_mandatory_protocols'] = '!SSLv2,!SSLv3'
default['postfix']['main']['smtp_tls_mandatory_protocols'] = '!SSLv2,!SSLv3'
default['postfix']['main']['smtp_sasl_auth_enable'] = 'no' default['postfix']['main']['smtp_sasl_auth_enable'] = 'no'
default['postfix']['main']['mailbox_size_limit'] = 0 default['postfix']['main']['mailbox_size_limit'] = 0
default['postfix']['main']['mynetworks'] = nil default['postfix']['main']['mynetworks'] = nil