forked from smfreegard/Haraka
-
Notifications
You must be signed in to change notification settings - Fork 6
/
tls.ini
25 lines (17 loc) · 1002 Bytes
/
tls.ini
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
; See 'haraka -h tls'
; ciphers: a list of permitted ciphers
ciphers=ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4
; rejectUnauthorized=false
; requestCert=true
[redis]
; options in this block require redis to be available.
; remember when a remote fails STARTTLS. The next time they connect,
; don't offer STARTTLS option (so message gets delivered).
; pro: increases mail reliability
; con: reduces security
; default: false
; disable_for_failed_hosts=true
; no_tls_hosts - disable TLS for servers with broken TLS.
[no_tls_hosts]
; 127.0.0.1
; 192.168.1.1