summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEray Aslan <eras@gentoo.org>2014-05-12 15:27:43 +0000
committerEray Aslan <eras@gentoo.org>2014-05-12 15:27:43 +0000
commit4ed26dca42f5d96f447dc56baa24d6a3f86fcc54 (patch)
treee80df879b7cf0506f291a181ae066a4bf3a3c16f /net-mail/dovecot/files
parentversion bump (diff)
downloadgentoo-2-4ed26dca42f5d96f447dc56baa24d6a3f86fcc54.tar.gz
gentoo-2-4ed26dca42f5d96f447dc56baa24d6a3f86fcc54.tar.bz2
gentoo-2-4ed26dca42f5d96f447dc56baa24d6a3f86fcc54.zip
Security bump - bug #509954
(Portage version: 2.2.10/cvs/Linux x86_64, signed Manifest commit with key 0x77F1F175586A3B1F)
Diffstat (limited to 'net-mail/dovecot/files')
-rw-r--r--net-mail/dovecot/files/dovecot-10-ssl.patch19
1 files changed, 19 insertions, 0 deletions
diff --git a/net-mail/dovecot/files/dovecot-10-ssl.patch b/net-mail/dovecot/files/dovecot-10-ssl.patch
new file mode 100644
index 000000000000..2e72e5945cb7
--- /dev/null
+++ b/net-mail/dovecot/files/dovecot-10-ssl.patch
@@ -0,0 +1,19 @@
+# bug 508552
+--- doc/example-config/conf.d/10-ssl.conf 2013-11-24 13:37:39.000000000 +0000
++++ doc/example-config/conf.d/10-ssl.conf 2014-05-12 14:42:26.000000000 +0000
+@@ -51,6 +51,15 @@
+ # SSL ciphers to use
+ #ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL
+
++# ##########################################
++# You are strongly encouraged to change the above two settings to
++#
++#ssl_protocols = !SSLv2 !SSLv3
++#ssl_cipher_list = ALL:!EXPORT:!LOW:!MEDIUM:!aNULL:+RC4:@STRENGTH
++#
++# if you are not required to support legacy mail clients.
++# ##########################################
++
+ # Prefer the server's order of ciphers over client's.
+ #ssl_prefer_server_ciphers = no
+