postfix/dovecot: disable tls-level compression

f936e1d1 · Lars Beckers · 7921b993 · f936e1d1 · f936e1d1
Commit f936e1d1 authored Jan 26, 2020 by Lars Beckers
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletion

dovecot/templates/conf.d/10-ssl.conf.j2 dovecot/templates/conf.d/10-ssl.conf.j2 +1 -1

postfix/templates/main.cf.j2 postfix/templates/main.cf.j2 +1 -0

No files found.
--- a/dovecot/templates/conf.d/10-ssl.conf.j2
+++ b/dovecot/templates/conf.d/10-ssl.conf.j2
@@ -81,4 +81,4 @@ ssl_prefer_server_ciphers = {{ 'yes' if dovecot_tls_prefer_server_ciphers else '

 # SSL extra options. Currently supported options are:
 #   no_compression - Disable compression.
-#ssl_options =
+ssl_options = no_compression
--- a/postfix/templates/main.cf.j2
+++ b/postfix/templates/main.cf.j2
@@ -76,6 +76,7 @@ tls_medium_cipherlist = {{ postfix_tls_medium_cipherlist }}
 {% if postfix_tls_dh_file %}
 smtpd_tls_dh1024_param_file = /etc/postfix/dh.pem
 {% endif %}
+tls_ssl_options = NO_COMPRESSION
 {% endif %}

 alias_maps = cdb:/etc/aliases