-
- Downloads
Merge branch 'ext-2' into 'master'
Buster Compat and Improved TLS Settings Dovecot updated some TLS parameters in their config file. This adds the new parameters in a backward compatible manner. Prompted by that move, I also changed dovecot and postfix to a preset-based configuration of TLS. The default preset is `previous`, that should get you a equivalent configuration as before, regardless of being on stretch or buster (minus OpenSSL changes). Also, there are presets `modern`, `intermediate`, `old` directly from the new <https://ssl-config.mozilla.org>. But beware, at least dovecot currently errors on TLSv1.3-only `modern` although OpenSSL should be able to handle it. The preset **overrides** all manual configuration, so you should upgrade your custom variables. Beware, that there are two **open bugs** on Debian's dovecot package which may impact your setup: - [928492: doveadm errors on listing PAM users, because of a glibc change](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=928492) - [930919: dsync no longer syncs Sieve scripts](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930919) For both bugs there is a patch on the dovecot repository that is already merged. But none made it into Debian yet. See merge request !3
No related branches found
No related tags found
Showing
- dovecot/defaults/main.yml 4 additions, 3 deletionsdovecot/defaults/main.yml
- dovecot/files/ffdhe2048.txt 8 additions, 0 deletionsdovecot/files/ffdhe2048.txt
- dovecot/files/ffdhe4096.txt 13 additions, 0 deletionsdovecot/files/ffdhe4096.txt
- dovecot/tasks/main.yml 21 additions, 0 deletionsdovecot/tasks/main.yml
- dovecot/templates/conf.d/10-ssl.conf.j2 23 additions, 2 deletionsdovecot/templates/conf.d/10-ssl.conf.j2
- dovecot/vars/tls-intermediate.yml 8 additions, 0 deletionsdovecot/vars/tls-intermediate.yml
- dovecot/vars/tls-modern.yml 8 additions, 0 deletionsdovecot/vars/tls-modern.yml
- dovecot/vars/tls-old.yml 8 additions, 0 deletionsdovecot/vars/tls-old.yml
- dovecot/vars/tls-previous.yml 8 additions, 0 deletionsdovecot/vars/tls-previous.yml
- postfix/defaults/main.yml 4 additions, 2 deletionspostfix/defaults/main.yml
- postfix/files/ffdhe2048.txt 8 additions, 0 deletionspostfix/files/ffdhe2048.txt
- postfix/files/ffdhe4096.txt 13 additions, 0 deletionspostfix/files/ffdhe4096.txt
- postfix/tasks/main.yml 21 additions, 0 deletionspostfix/tasks/main.yml
- postfix/templates/main.cf.j2 21 additions, 5 deletionspostfix/templates/main.cf.j2
- postfix/vars/tls-intermediate.yml 9 additions, 0 deletionspostfix/vars/tls-intermediate.yml
- postfix/vars/tls-modern.yml 9 additions, 0 deletionspostfix/vars/tls-modern.yml
- postfix/vars/tls-old.yml 9 additions, 0 deletionspostfix/vars/tls-old.yml
- postfix/vars/tls-previous.yml 9 additions, 0 deletionspostfix/vars/tls-previous.yml
dovecot/files/ffdhe2048.txt
0 → 100644
dovecot/files/ffdhe4096.txt
0 → 100644
dovecot/vars/tls-intermediate.yml
0 → 100644
dovecot/vars/tls-modern.yml
0 → 100644
dovecot/vars/tls-old.yml
0 → 100644
dovecot/vars/tls-previous.yml
0 → 100644
postfix/files/ffdhe2048.txt
0 → 100644
postfix/files/ffdhe4096.txt
0 → 100644
postfix/vars/tls-intermediate.yml
0 → 100644
postfix/vars/tls-modern.yml
0 → 100644
postfix/vars/tls-old.yml
0 → 100644
postfix/vars/tls-previous.yml
0 → 100644
Please register or sign in to comment