From: Timo Sirainen <tss@iki.fi>
Date: Tue, 20 Oct 2009 23:20:42 +0000 (-0400)
Subject: ssl_ciphers_list: Disable anonymous and export ciphers by default.
X-Git-Tag: 2.0.alpha2~51
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=9990cf6923b648420e9bd102e38ebfc2b9322dcc;p=thirdparty%2Fdovecot%2Fcore.git

ssl_ciphers_list: Disable anonymous and export ciphers by default.

--HG--
branch : HEAD
---

diff --git a/doc/example-config/conf.d/ssl.conf b/doc/example-config/conf.d/ssl.conf
index 3530f87914..6ff88d3d2f 100644
--- a/doc/example-config/conf.d/ssl.conf
+++ b/doc/example-config/conf.d/ssl.conf
@@ -38,4 +38,4 @@ ssl_key = </etc/ssl/private/dovecot.pem
 #ssl_parameters_regenerate = 168
 
 # SSL ciphers to use
-#ssl_cipher_list = ALL:!LOW:!SSLv2
+#ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL
diff --git a/src/login-common/login-settings.c b/src/login-common/login-settings.c
index 072cd97e1b..1b4b4f829b 100644
--- a/src/login-common/login-settings.c
+++ b/src/login-common/login-settings.c
@@ -55,7 +55,7 @@ static struct login_settings login_default_settings = {
 	MEMBER(ssl_key) "",
 	MEMBER(ssl_key_password) "",
 	MEMBER(ssl_parameters_file) "ssl-parameters.dat",
-	MEMBER(ssl_cipher_list) "ALL:!LOW:!SSLv2",
+	MEMBER(ssl_cipher_list) "ALL:!LOW:!SSLv2:!EXP:!aNULL",
 	MEMBER(ssl_cert_username_field) "commonName",
 	MEMBER(ssl_verify_client_cert) FALSE,
 	MEMBER(ssl_require_client_cert) FALSE,