starred/certbot-certbot
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-07-27 00:00:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

Treat min-tls-version as a minimum.

Browse Source 
Fixes #5.
This commit is contained in:
Jacob Hoffman-Andrews
2014-09-10 17:36:46 -04:00
parent 7f9dadd681
commit 622fc72dc1
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
MTAConfigGenerator.py
+8 -1
View File
@@ -128,7 +128,14 @@ class PostfixConfigGenerator(MTAConfigGenerator):
mx_policy = self.policy_config.tls_policies[mx_domain]
entry = address_domain + " encrypt"
if "min-tls-version" in mx_policy:
entry += " protocols=" + mx_policy["min-tls-version"]
if mx_policy["min-tls-version"].lower() == "tlsv1":
entry += " protocols=!SSLv2,!SSLv3"
elif mx_policy["min-tls-version"].lower() == "tlsv1.1":
entry += " protocols=!SSLv2,!SSLv3,!TLSv1"
elif mx_policy["min-tls-version"].lower() == "tlsv1.2":
entry += " protocols=!SSLv2,!SSLv3,!TLSv1,!TLSv1.1"
else:
print mx_policy["min-tls-version"]
self.policy_lines.append(entry)
f = open(self.policy_file, "w")