[DBMail 0001066]: Patch to add DHE/PFS TLS support
Mantis Bug Tracker <[email protected]> Wed, 18 Mar 2015 14:08:26 +0100
| Newsgroups | gmane.mail.imap.dbmail.devel |
|---|---|
| Message-ID | <[email protected]> |
The following issue has been SUBMITTED. ====================================================================== http://www.dbmail.org/mantis/view.php?id=1066 ====================================================================== Reported By: dfroe Assigned To: ====================================================================== Project: DBMail Issue ID: 1066 Category: General Reproducibility: N/A Severity: feature Priority: normal Status: new target: ====================================================================== Date Submitted: 24-Jan-15 17:36 CET Last Modified: 24-Jan-15 17:36 CET ====================================================================== Summary: Patch to add DHE/PFS TLS support Description: To enhance the security of dbmail's TLS layer using OpenSSL I added some code to include DHE/PFS support as well as some minor tweaks (disabling SSLv2/3 and prefering the server cipher suite). See attachment for a proof of concept. For me this works fine with dbmail 3.2.1 and openssl 1.0.1l. Maybe this can be added into git for general use in future releases. ====================================================================== Issue History Date Modified Username Field Change ====================================================================== 24-Jan-15 17:36 dfroe New Issue 24-Jan-15 17:36 dfroe File Added: dbmail-tls-dh.patch ======================================================================