Postfix disable CAMELLIA; Cipherlist

postfix

#1

Dear Forum

I added in mail/postfix/smtpd/tls/exclude_ciphers CAMELLIA, kEDH+CAMELLIA, kRSA+CAMELLIA to exclude CAMELLIA ciphers but nothing happens. What is the proper way to exclude CAMELLIA ciphers?

I also cannot find in the registry tls_medium_cipherlist for postfix. How do I add that?

Best regards
Alexander


#2

Hello Alexander,

UCR only compiles the configuration file(s) from templates. The service must still be restarted manually:
service postfix restart

You can configure this by creating/appending to a file main.cf.local: http://docs.software-univention.de/manual-4.3.html#mail::serverconfig::maincflocal

Greetings
Daniel