[Dovecot] How do I make dovecot not use sslv2 for pop?

Patrick Horgan patrick at ootbcomp.com
Fri Jan 29 01:23:30 EET 2010


Patrick Horgan wrote:
> From nmap:
>
> 995/tcp  open   ssl/pop3   Dovecot pop3d
> |_ sslv2: server still supports SSLv2
> |_ pop3-capabilities: USER CAPA UIDL PIPELINING RESP-CODES TOP 
> SASL(PLAIN LOGIN)
>
> pop3 allows SSLv2, imap doesn't.  In my dovecot.conf I have:
>
> ssl_cipher_list = ALL:!LOW:!SSLv2
>
> at the global level.  Do I need to put it inside the protocol pop3{} 
> section?
Just a bump, still have the problem, why would dovecot support sslv2 for 
pop, but not for imap, when it's configured to not support  sslv2 at all?

Patrick


More information about the dovecot mailing list