Re: [Dovecot] Anonymous SSL Ciphers

On Mon, 2009-11-23 at 12:22 -0800, Jeffrey Nikoletich wrote:

I am having an issue with getting anonymous ssl ciphers disabled in dovecot. I have googled like crazy to find the solution with no help. .. ssl_cipher_list: HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3

Dovecot v2.0's default is:

ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL

The important part for disabling anonymous ciphers is the !aNULL.