From 62b1df04a05ebcf47af648d8ae1d798b130061bb Mon Sep 17 00:00:00 2001
From: d-fens <d_fens@redbrick.dcu.ie>
Date: Fri, 19 Aug 2016 12:19:05 +0100
Subject: [PATCH] Update dovecot SSL/TLS configuration

Ensure that RC4 and SSLv3 is not used. This is based off mailinabox project settings, while not the most ideal settings this improves the configuration from what it is currently.
---
 dovecot/conf/dovecot.conf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/dovecot/conf/dovecot.conf b/dovecot/conf/dovecot.conf
index c25274ec..4b9af3b6 100644
--- a/dovecot/conf/dovecot.conf
+++ b/dovecot/conf/dovecot.conf
@@ -57,6 +57,8 @@ namespace inbox {
 ssl = yes
 ssl_cert = </certs/cert.pem
 ssl_key = </certs/key.pem
+ssl_protocols=!SSLv3 !SSLv2
+ssl_cipher_list=TLSv1+HIGH !SSLv2 !RC4 !aNULL !eNULL !3DES @STRENGTH
 
 ###############
 # Authentication