On Mon, 1 May 2023, Kolusion K via Postfix-users wrote:
Hello
Postfix's documentation for the tls_high_cipherlist parameter states to see
the output of the command 'postconf -d' to see the default setting.
Sadly, the documentation lacks specificness, and the output spit out about
500 lines, so I am not sure what I am suppose to be looking at.
postconf -d will print all the (default) settings, you can use grep to filter
the specific line you're looking for.
I found the parameter mentioned on one of the lines. I was expecting to see a
list of ciphers, such as AES-256 ectetera, but I don't see any mention of a
type of cipher, so I'm not sure if looking at the line for the
tls_high_cipherlist parameter is what I am suppose to be looking at.
postfix uses openssl, and if you had read the manual you would have seen
something like:
* tls_high_cipherlist (default: see "postconf -d" output)
The OpenSSL cipherlist for "high" grade ciphers. [...]
so you should then look at your openssl configuration (which may or may not be
whatever default your distribution is using).
$ man 1 ciphers
will take you further.
Could anyone confirm if that is what I am suppose to be looking at and if I am
correct in what I was expecting?
Only you can know what you were expecting, and hence what you are supposed to be
looking at.
Good luck.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
