starred/certbot-certbot-2
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-08-04 08:03:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7 from jsha/min-tls-version

Browse Source 
Treat min-tls-version as a minimum.
This commit is contained in:
Peter Eckersley
2014-10-08 11:32:54 -07:00
parent 7f9dadd681 622fc72dc1
commit 97cce82e5a
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
MTAConfigGenerator.py
+8 -1
View File
@@ -128,7 +128,14 @@ class PostfixConfigGenerator(MTAConfigGenerator):
mx_policy = self.policy_config.tls_policies[mx_domain] mx_policy = self.policy_config.tls_policies[mx_domain]
entry = address_domain + " encrypt" entry = address_domain + " encrypt"
if "min-tls-version" in mx_policy: if "min-tls-version" in mx_policy:
entry += " protocols=" + mx_policy["min-tls-version"] if mx_policy["min-tls-version"].lower() == "tlsv1":
entry += " protocols=!SSLv2,!SSLv3"
elif mx_policy["min-tls-version"].lower() == "tlsv1.1":
entry += " protocols=!SSLv2,!SSLv3,!TLSv1"
elif mx_policy["min-tls-version"].lower() == "tlsv1.2":
entry += " protocols=!SSLv2,!SSLv3,!TLSv1,!TLSv1.1"
else:
print mx_policy["min-tls-version"]
self.policy_lines.append(entry) self.policy_lines.append(entry)
f = open(self.policy_file, "w") f = open(self.policy_file, "w")