Re: 'ssl_cipher_list' setting

Am 05.01.2015 um 21:53 schrieb Yoshito Takeuchi:

I used

FreeBSD 10.1 Dovecot 2.2.15

I want pop3s, so I made

/usr/local/etc/dovecot/local.conf

ssl = yes ssl_cert =

It's work fine. But, change

ssl_cipher_list = ALL:!LOW:!SSLv2:!SSLv3:!EXP:!aNULL:!RC4

( SSLV3 -> SSLv3 )

I did trouble

/var/log/maillog

Jan 6 05:41:53 example dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx, TLS handshaking, session=<5e9 zuO0LVwB+PO8D>

Is this bug ? or I did miss setting?

!SSLV3 was wrong and not recognized !SSLv3 is recognized but bullshit since you want to disable SSLv3 but not all ciphers which are still valid for newer TLS versions

you do that already correctly with "ssl_protocols"