disabling certain ciphers

[Darren Pilgrim]

On 12/2/2014 10:05 AM, Will Yardley wrote:
> I had some problems the first few times I restarted with ssl-params
> seeming to hang, but it finally works.

That would have been dovecot generating the 4096-bit DH parameters.  It 
can take a bit, but Dovecot is quite fast at it.  If Dovecot supported 
it, you could use OpenSSL to generate tested-safe DH parameters and 
supply them by file the same way you do for Postfix, nginx, etc.