User Tools

Site Tools


exim4:tls

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
exim4:tls [2016/11/30 12:18] – [Logging] peterexim4:tls [2020/07/15 09:30] (current) – external edit 127.0.0.1
Line 1: Line 1:
 ====== Exim4 - TLS ====== ====== Exim4 - TLS ======
- 
-Generate your keys.  
- 
-first switch to cd /etc 
  
 ===== Generate a 1024-bit RSA key ===== ===== Generate a 1024-bit RSA key =====
Line 15: Line 11:
  
 <code bash> <code bash>
-openssl dhparam -out exim.dhparam  1024 +openssl dhparam -out exim.dhparam 1024 
 </code> </code>
  
Line 47: Line 43:
 </file> </file>
  
 +<WRAP info>
 +If tls_dhparam is set, the SSL library is initialized for the use of Diffie-Hellman ciphers with the parameters contained in the file.  Set this to none to disable use of DH entirely, by making no prime available:
 +</WRAP>
  
 +<WRAP info>
 +The ciphers could be set as something like:
 +
 +<code>
 +tls_require_ciphers = ${if =={$received_port}{25}\
 +                           {DEFAULT}\
 +                           {HIGH:!MD5:!SHA1}}
 +</code>
 +
 +# Use this command to check the ciphers that openssl supports:
 +
 +<code bash>
 +openssl ciphers 'HIGH:!MD5:!SHA1'
 +</code>
 +</WRAP>
 ===== Logging ===== ===== Logging =====
  
exim4/tls.1480508330.txt.gz · Last modified: 2020/07/15 09:30 (external edit)

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki