Re: Disallowing SSLv2

2010-06-04 Thread Dennis Davis
On Fri, 4 Jun 2010, Raphael Jaffey wrote: > From: Raphael Jaffey > To: Lorenzo Marcantonio > Cc: "Rosenbaum, Larry M." , > "info-cyrus@lists.andrew.cmu.edu" > Date: Fri, 4 Jun 2010 15:41:54 > Subject: Re: Disallowing SSLv2 > > Lorenzo Marcanto

RE: Disallowing SSLv2

2010-06-04 Thread Rosenbaum, Larry M.
> From: Raphael Jaffey [mailto:rjaf...@artic.edu] > Sent: Friday, June 04, 2010 10:42 AM > To: Lorenzo Marcantonio > Cc: Rosenbaum, Larry M.; info-cyrus@lists.andrew.cmu.edu > Subject: Re: Disallowing SSLv2 > > > > Lorenzo Marcantonio wrote: > > On Fri, 4 Ju

Re: Disallowing SSLv2

2010-06-04 Thread Raphael Jaffey
Lorenzo Marcantonio wrote: > On Fri, 4 Jun 2010, Rosenbaum, Larry M. wrote: > >> How do I tell Cyrus IMAP to not allow SSLv2? > > I used this in imapd.conf: > > tls_cipher_list: ALL:!ADH:!EXP:!MD5:!LOW > You need to add !SSLv2 to your example to get the desired effect: tls_cipher_list: ALL:!

Re: Disallowing SSLv2

2010-06-04 Thread Lorenzo Marcantonio
On Fri, 4 Jun 2010, Rosenbaum, Larry M. wrote: > How do I tell Cyrus IMAP to not allow SSLv2? I used this in imapd.conf: tls_cipher_list: ALL:!ADH:!EXP:!MD5:!LOW -- Lorenzo Marcantonio Logos Srl Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/tw