From c2ee9f217ad35a2d614cd978786b8418805ee4e0 Mon Sep 17 00:00:00 2001 From: Benjamin Asbach <4610679-asbachb@users.noreply.gitlab.com> Date: Wed, 13 May 2020 00:09:10 +0000 Subject: [PATCH] Enabled TLS 1.3 support --- mail-server/postfix.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/mail-server/postfix.nix b/mail-server/postfix.nix index dff0d60..7df34d7 100644 --- a/mail-server/postfix.nix +++ b/mail-server/postfix.nix @@ -181,10 +181,10 @@ in smtpd_tls_eecdh_grade = ultra # Disable obselete protocols - smtpd_tls_protocols = TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3 - smtp_tls_protocols = TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3 - smtpd_tls_mandatory_protocols = TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3 - smtp_tls_mandatory_protocols = TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3 + smtpd_tls_protocols = TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3 + smtp_tls_protocols = TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3 + smtpd_tls_mandatory_protocols = TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3 + smtp_tls_mandatory_protocols = TLSv1.3, TLSv1.2, TLSv1.1, !TLSv1, !SSLv2, !SSLv3 smtp_tls_ciphers = high smtpd_tls_ciphers = high