Skip to content

Instantly share code, notes, and snippets.

@timb-machine
Created September 4, 2017 14:28
Show Gist options
  • Save timb-machine/e848bfd97c6e8bd910e402c3e37086b9 to your computer and use it in GitHub Desktop.
Save timb-machine/e848bfd97c6e8bd910e402c3e37086b9 to your computer and use it in GitHub Desktop.
Hardening Sendmail cipher suites
Taken from http://www.michaelm.info/blog/?p=1256:
LOCAL_CONFIG
O ServerSSLOptions=+SSL_OP_NO_SSLv2 +SSL_OP_NO_SSLv3 +SSL_OP_CIPHER_SERVER_PREFERENCE
O ClientSSLOptions=+SSL_OP_NO_SSLv2 +SSL_OP_NO_SSLv3 +SSL_OP_CIPHER_SERVER_PREFERENCE
O CipherList=EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment