From f936e1d1e005fd24e5814f32ac943068a8fe709e Mon Sep 17 00:00:00 2001
From: Lars Beckers <lars.beckers@rwth-aachen.de>
Date: Sun, 26 Jan 2020 19:43:04 +0100
Subject: [PATCH] postfix/dovecot: disable tls-level compression
---
dovecot/templates/conf.d/10-ssl.conf.j2 | 2 +-
postfix/templates/main.cf.j2 | 1 +
2 files changed, 2 insertions(+), 1 deletion(-)
diff --git a/dovecot/templates/conf.d/10-ssl.conf.j2 b/dovecot/templates/conf.d/10-ssl.conf.j2
index a461620..baa1b40 100644
--- a/dovecot/templates/conf.d/10-ssl.conf.j2
+++ b/dovecot/templates/conf.d/10-ssl.conf.j2
@@ -81,4 +81,4 @@ ssl_prefer_server_ciphers = {{ 'yes' if dovecot_tls_prefer_server_ciphers else '
# SSL extra options. Currently supported options are:
# no_compression - Disable compression.
-#ssl_options =
+ssl_options = no_compression
diff --git a/postfix/templates/main.cf.j2 b/postfix/templates/main.cf.j2
index e0185e3..76028f2 100644
--- a/postfix/templates/main.cf.j2
+++ b/postfix/templates/main.cf.j2
@@ -76,6 +76,7 @@ tls_medium_cipherlist = {{ postfix_tls_medium_cipherlist }}
{% if postfix_tls_dh_file %}
smtpd_tls_dh1024_param_file = /etc/postfix/dh.pem
{% endif %}
+tls_ssl_options = NO_COMPRESSION
{% endif %}
alias_maps = cdb:/etc/aliases
--
GitLab