You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-user@james.apache.org by Phillip Odam <ph...@nitorgroup.com> on 2012/12/07 23:49:57 UTC
Howto disable weak SSL/TLS ciphers for SMTP
I want to be able to disable weak ciphers when using either SSL or TLS
for SMTP.
From what I can gather the issue
https://issues.apache.org/jira/browse/JAMES-385 was raised to address
the ability to be able to select which ciphers are offered and hence be
able to disable weak ciphers.
However reading through JAMES-385 hasn't helped me to figure out how to
disable weak ciphers. I know I must be missing something glaringly obvious!
To accomplish this in JAMES is it anything like Apache Tomcat -
http://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL_Support_-_BIO_and_NIO,
where you set the ciphers attribute to a comma separated list of
encryption ciphers that the socket is allowed to use.
Regards
Phillip
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
Re: Howto disable weak SSL/TLS ciphers for SMTP
Posted by Phillip Odam <ph...@nitorgroup.com>.
Perfect, thank you Eric
A little more searching of the code base may have got me to see the
config details in AbstractConfigurableAsyncServer
Thanks for the quick response.
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
Re: Howto disable weak SSL/TLS ciphers for SMTP
Posted by Eric Charles <er...@apache.org>.
Hi,
I guess you could do this via a non-documented property
I have reopened JAMES-385 to add doc and examples.
In the meantime, you could try in your smtpserver.conf with for example:
<tls socketTLS="false" startTLS="false">
....
<supportedCipherSuites>
<cipherSuite>RSA,HMAC</cipherSuite>
</supportedCipherSuites>
...
</tls>
Thx, Eric
On 07/12/2012 22:49, Phillip Odam wrote:
> I want to be able to disable weak ciphers when using either SSL or TLS
> for SMTP.
>
> From what I can gather the issue
> https://issues.apache.org/jira/browse/JAMES-385 was raised to address
> the ability to be able to select which ciphers are offered and hence be
> able to disable weak ciphers.
>
> However reading through JAMES-385 hasn't helped me to figure out how to
> disable weak ciphers. I know I must be missing something glaringly obvious!
>
> To accomplish this in JAMES is it anything like Apache Tomcat -
> http://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL_Support_-_BIO_and_NIO,
> where you set the ciphers attribute to a comma separated list of
> encryption ciphers that the socket is allowed to use.
>
> Regards
> Phillip
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org