Use better ciphers.

fixes #22 (partly)
iredmail · Apr 5, 2020 · a6acf47 · a6acf47
1 parent ff09007
commit a6acf47
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/conf/global b/conf/global
@@ -612,7 +612,7 @@ export SSL_DH1024_PARAM_FILE="${SSL_FILE_DIR}/dh2048_param.pem"
 
 # use of the most secure ciphers first and gradually fall back to
 # less-preferred ciphers should the client not support them.
-export SSL_CIPHERS='ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5'
+export SSL_CIPHERS='EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'
 
 # SSL key.
 export OPENSSL_CONF="${SSL_FILE_DIR}/openssl.cnf"