Re: AW: TLS Security

2021-07-15 Thread Aki Tuomi
i Tuomi > Gesendet: Mittwoch, 14. Juli 2021 19:34 > An: Stefan Schumacher ; dovecot@dovecot.org > > Betreff: Re: TLS Security > > > On 14/07/2021 17:55 Stefan Schumacher > wrote: > > > > > > Hi, > > > > > > I wish to b

AW: TLS Security

2021-07-15 Thread Stefan Schumacher
Hi Aki, Where do I get testssh.sl? If the script is of your design could you mail it to me? Yours Stefan Von: Aki Tuomi Gesendet: Mittwoch, 14. Juli 2021 19:34 An: Stefan Schumacher ; dovecot@dovecot.org Betreff: Re: TLS Security > On 14/07/2021 17

AW: TLS Security

2021-07-15 Thread Stefan Schumacher
smtp_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1 smtp_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1 Von: justina colmena ~biz Gesendet: Mittwoch, 14. Juli 2021 18:50 An: dovecot@dovecot.org ; Stefan Schumacher Betreff: Re: TLS Security

AW: TLS Security

2021-07-15 Thread Stefan Schumacher
ocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1 smtp_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1 Von: justina colmena ~biz Gesendet: Mittwoch, 14. Juli 2021 18:50 An: dovecot@dovecot.org ; Stefan Schumacher Betreff: Re: TLS Security Interesting. Assuming

Re: TLS Security

2021-07-14 Thread Plutocrat
I've found this resource useful in the past https://ssl-config.mozilla.org/#server=dovecot&version=2.3.9&config=intermediate&openssl=1.1.1d&guideline=5.6 P.

Re: TLS Security

2021-07-14 Thread Aki Tuomi
> On 14/07/2021 17:55 Stefan Schumacher wrote: > > > Hi, > > > I wish to build a new secure email server. It seems I am on the right way – > at least I get no more error messages for Postfix – but Dovecot is still > making trouble. > > > I am using Dovecot 1:2.3.4.1-5+deb10u6 and I am us

Re: TLS Security

2021-07-14 Thread justina colmena ~biz
Interesting. Assuming your "Kali" tools are in fact up to date to test with newer protocols TLS1.2+, is Dovecot compiled against a recent version of the OpenSSL or GnuTLS library or whatever it uses to support the newer TLS protocols? Definitely an outdated cipher issue, on Postfix as well as D

TLS Security

2021-07-14 Thread Stefan Schumacher
Hi, I wish to build a new secure email server. It seems I am on the right way – at least I get no more error messages for Postfix – but Dovecot is still making trouble. I am using Dovecot 1:2.3.4.1-5+deb10u6 and I am using ISPconfig 3.25 to do the rough configuring and nano and whats left of