Correct policy map delimitation

This commit is contained in:
Peter Eckersley
2016-02-24 18:19:47 -08:00
parent 959e943de8
commit 6db2858825
+3 -3
View File
@@ -126,11 +126,11 @@ class PostfixConfigGenerator(MTAConfigGenerator):
mx_policy = self.policy_config.get_tls_policy(mx_domain) mx_policy = self.policy_config.get_tls_policy(mx_domain)
entry = address_domain + " encrypt" entry = address_domain + " encrypt"
if mx_policy.min_tls_version.lower() == "tlsv1": if mx_policy.min_tls_version.lower() == "tlsv1":
entry += " protocols=!SSLv2,!SSLv3" entry += " protocols=!SSLv2:!SSLv3"
elif mx_policy.min_tls_version.lower() == "tlsv1.1": elif mx_policy.min_tls_version.lower() == "tlsv1.1":
entry += " protocols=!SSLv2,!SSLv3,!TLSv1" entry += " protocols=!SSLv2:!SSLv3:!TLSv1"
elif mx_policy.min_tls_version.lower() == "tlsv1.2": elif mx_policy.min_tls_version.lower() == "tlsv1.2":
entry += " protocols=!SSLv2,!SSLv3,!TLSv1,!TLSv1.1" entry += " protocols=!SSLv2:!SSLv3:!TLSv1:!TLSv1.1"
else: else:
print mx_policy.min_tls_version print mx_policy.min_tls_version
self.policy_lines.append(entry) self.policy_lines.append(entry)