Added smtpd_tls mandatory protocols and ciphers

Oefenweb / ansible-postfix

Ansible role to set up postfix in Debian-like systems

MIT License

174 stars 82 forks source link

Added smtpd_tls mandatory protocols and ciphers #116

Closed billmetangmo closed 3 years ago

billmetangmo commented 3 years ago

Hi,

Thanks for sharing you role with the community. I decide to use it to install postfix months ago and today i needed to apply a security fix: disable tls previous version. I noticed that the role was not capable to do so , so i enrich it with this commit.

The default values for the 3 new variables are the one recommended by https://ssl-config.mozilla.org/#server=postfix&version=3.4.8&config=intermediate&openssl=1.1.1d&guideline=5.6

Regards, Bill

billmetangmo commented 3 years ago

I used postifx_raw_options to enable it , so i will close this PR. Thanks :)