[Dovecot] How do I make dovecot not use sslv2 for pop?
Patrick Horgan
patrick at ootbcomp.com
Fri Jan 29 01:23:30 EET 2010
Patrick Horgan wrote:
> From nmap:
>
> 995/tcp open ssl/pop3 Dovecot pop3d
> |_ sslv2: server still supports SSLv2
> |_ pop3-capabilities: USER CAPA UIDL PIPELINING RESP-CODES TOP
> SASL(PLAIN LOGIN)
>
> pop3 allows SSLv2, imap doesn't. In my dovecot.conf I have:
>
> ssl_cipher_list = ALL:!LOW:!SSLv2
>
> at the global level. Do I need to put it inside the protocol pop3{}
> section?
Just a bump, still have the problem, why would dovecot support sslv2 for
pop, but not for imap, when it's configured to not support sslv2 at all?
Patrick
More information about the dovecot
mailing list