From c0f6a3e38769036fc7db4dc44449dacb6048a200 Mon Sep 17 00:00:00 2001
From: Pierre Jaury <pierre@jaury.eu>
Date: Fri, 19 Aug 2016 13:54:47 +0200
Subject: [PATCH] Apply the BetterCrypto Dovecot configuration, related to #45

---
 dovecot/conf/dovecot.conf | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/dovecot/conf/dovecot.conf b/dovecot/conf/dovecot.conf
index 4b9af3b6..93dca19e 100644
--- a/dovecot/conf/dovecot.conf
+++ b/dovecot/conf/dovecot.conf
@@ -58,7 +58,10 @@ ssl = yes
 ssl_cert = </certs/cert.pem
 ssl_key = </certs/key.pem
 ssl_protocols=!SSLv3 !SSLv2
-ssl_cipher_list=TLSv1+HIGH !SSLv2 !RC4 !aNULL !eNULL !3DES @STRENGTH
+ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA
+ssl_prefer_server_ciphers = yes
+ssl_dh_parameters_length = 2048
+ssl_options = no_compression
 
 ###############
 # Authentication