Re: Outlook and TLSv.1

[Reindl Harald]

Am 18.01.2015 um 12:07 schrieb Jerry:

I have:
ssl_cipher_list = ALL:!LOW:!SSLv2:!SSLv3:!EXP:!aNULL
and Outlook 2013 works fine

!SSLv3 has no business in the cipher list
you disable ciphers still valid for TLS that way

that was all discussed dozenz of times here
ssl_protocols = !SSLv2 !SSLv3

but you break *for sure* older clients and should *not* recommend that broken setup untested and believe you are helping with it *remove !SSLv3 from teh cipher list* and if you now say your dovecot version don't support "ssl_protocols" then upgrade or just accept that you can't have outdated software and state of the art protovol support

signature.asc
Description: OpenPGP digital signature