Re: AW: TLS Security

2021-07-15 Thread Aki Tuomi
i Tuomi > Gesendet: Mittwoch, 14. Juli 2021 19:34 > An: Stefan Schumacher ; dovecot@dovecot.org > > Betreff: Re: TLS Security > > > On 14/07/2021 17:55 Stefan Schumacher > wrote: > > > > > > Hi, > > > > > > I wish to b

AW: TLS Security

2021-07-15 Thread Stefan Schumacher
Hi Aki, Where do I get testssh.sl? If the script is of your design could you mail it to me? Yours Stefan Von: Aki Tuomi Gesendet: Mittwoch, 14. Juli 2021 19:34 An: Stefan Schumacher ; dovecot@dovecot.org Betreff: Re: TLS Security > On 14/07/2021 17

AW: TLS Security

2021-07-15 Thread Stefan Schumacher
smtp_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1 smtp_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1 Von: justina colmena ~biz Gesendet: Mittwoch, 14. Juli 2021 18:50 An: dovecot@dovecot.org ; Stefan Schumacher Betreff: Re: TLS Security

AW: TLS Security

2021-07-15 Thread Stefan Schumacher
= !SSLv2, !SSLv3, !TLSv1, !TLSv1.1 smtp_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1 Von: justina colmena ~biz Gesendet: Mittwoch, 14. Juli 2021 18:50 An: dovecot@dovecot.org ; Stefan Schumacher Betreff: Re: TLS Security Interesting. Assuming your

Re: TLS Security

2021-07-14 Thread Plutocrat
I've found this resource useful in the past https://ssl-config.mozilla.org/#server=dovecot=2.3.9=intermediate=1.1.1d=5.6 P.

Re: TLS Security

2021-07-14 Thread Aki Tuomi
> On 14/07/2021 17:55 Stefan Schumacher wrote: > > > Hi, > > > I wish to build a new secure email server. It seems I am on the right way – > at least I get no more error messages for Postfix – but Dovecot is still > making trouble. > > > I am using Dovecot 1:2.3.4.1-5+deb10u6 and I am

Re: TLS Security

2021-07-14 Thread justina colmena ~biz
Interesting. Assuming your "Kali" tools are in fact up to date to test with newer protocols TLS1.2+, is Dovecot compiled against a recent version of the OpenSSL or GnuTLS library or whatever it uses to support the newer TLS protocols? Definitely an outdated cipher issue, on Postfix as well as

TLS Security

2021-07-14 Thread Stefan Schumacher
Hi, I wish to build a new secure email server. It seems I am on the right way – at least I get no more error messages for Postfix – but Dovecot is still making trouble. I am using Dovecot 1:2.3.4.1-5+deb10u6 and I am using ISPconfig 3.25 to do the rough configuring and nano and whats left