Re: cyradm TLS issues
Kjetil Torgrim Homme <[email protected]>
| Newsgroups | gmane.mail.imap.cyrus |
|---|---|
| Message-ID | <[email protected]> |
to. den 21. 10. 2021 klokka 07.07 (+1000) skreiv Simon Wilson via Info: > cyrus.conf: > > <snip> > imaplocal cmd="imapd -C /etc/imapd-local.conf" > listen="127.0.0.1:imap" prefork=1 proto=tcp4 > imap cmd="imapd" > listen="192.168.1.230:imap" prefork=5 proto=tcp4 > <snip> > > imapd-local.conf > <snip> > allowplaintext: yes > <snip> > I think it is very peculiar that the Perl module on the OP's EL7 system (perl-Net-SSLeay) isn't supporting TLS 1.2, much less TLS 1.1. Both it and cyrus-imapd should be using OpenSSL 1.0.2k. I would first make sure the system is up to date on patches. That said, your hack allows another nice difference for locking down the system: The admin user(s) can be available via localhost only. (Not an option for a murder setup, I suspect.) -- venleg helsing, Kjetil T. ------------------------------------------ Cyrus: Info Permalink: https://cyrus.topicbox.com/groups/info/T21eaaa194ab9b730-M25ef92b43df9ba0ba9b77ca7 Delivery options: https://cyrus.topicbox.com/groups/info/subscription