Re: cyradm TLS issues

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



to. den 21. 10. 2021 klokka 07.07 (+1000) skreiv Simon Wilson via Info:
> cyrus.conf:
> 
> <snip>
>      imaplocal    cmd="imapd -C /etc/imapd-local.conf"     
>  listen="127.0.0.1:imap"         prefork=1  proto=tcp4
>      imap         cmd="imapd"                               
> listen="192.168.1.230:imap"     prefork=5  proto=tcp4
> <snip>
> 
> imapd-local.conf
> <snip>
>      allowplaintext: yes
> <snip>
> 

I think it is very peculiar that the Perl module on the OP's EL7 system
(perl-Net-SSLeay) isn't supporting TLS 1.2, much less TLS 1.1.  Both it
and cyrus-imapd should be using OpenSSL 1.0.2k.  I would first make sure
the system is up to date on patches.

That said, your hack allows another nice difference for locking down the
system: The admin user(s) can be available via localhost only.  (Not an
option for a murder setup, I suspect.)

-- 
venleg helsing,
Kjetil T.


------------------------------------------
Cyrus: Info
Permalink: https://cyrus.topicbox.com/groups/info/T21eaaa194ab9b730-M25ef92b43df9ba0ba9b77ca7
Delivery options: https://cyrus.topicbox.com/groups/info/subscription




[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux