Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
technical:internet_email_server_setup [2019/11/15 08:38] – [TLS Certificate] bobtechnical:internet_email_server_setup [2019/11/15 10:27] (current) – [DANE] bob
Line 39: Line 39:
 smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
 smtp_tls_security_level = may smtp_tls_security_level = may
 +smtp_tls_cert_file = 
 +smtp_tls_key_file = 
 +smtp_tls_CAfile = 
 +smtp_tls_mandatory_protocols=!SSLv2,!SSLv3
  
 smtpd_tls_loglevel = 1 smtpd_tls_loglevel = 1
Line 46: Line 50:
 smtpd_tls_key_file =  smtpd_tls_key_file = 
 smtpd_tls_CAfile =  smtpd_tls_CAfile = 
 +smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3
 +smtpd_tls_exclude_ciphers = MD5,DES,RC4
 </code> </code>
  
-SSL Tools has a great utility for [[https://ssl-tools.net/mailservers/|checking SMTP server TLS]].+SMTP TLS checker tools 
 +  * [[https://ssl-tools.net/mailservers/|SSL Tools]] 
 +  * [[https://luxsci.com/smtp-tls-checker|LUXSCI]] 
  
 ===== SPF ===== ===== SPF =====
Line 100: Line 109:
 https://ssl-tools.net/dane https://ssl-tools.net/dane
  
 +https://ssl-tools.net/tlsa-generator