Postfix disable CAMELLIA; Cipherlist

[Xela]

Dear Forum

I added in mail/postfix/smtpd/tls/exclude_ciphers CAMELLIA, kEDH+CAMELLIA, kRSA+CAMELLIA to exclude CAMELLIA ciphers but nothing happens. What is the proper way to exclude CAMELLIA ciphers?

I also cannot find in the registry tls_medium_cipherlist for postfix. How do I add that?

Best regards
Alexander

[troeder]

Hello Alexander,

@Xela

I added in mail/postfix/smtpd/tls/exclude_ciphers ‘CAMELLIA, kEDH+CAMELLIA, kRSA+CAMELLIA’ to exclude CAMELLIA ciphers but nothing happens. What is the proper way to exclude CAMELLIA ciphers?

UCR only compiles the configuration file(s) from templates. The service must still be restarted manually:
service postfix restart

@Xela

I also cannot find in the registry ‘tls_medium_cipherlist’ for postfix. How do I add that?

You can configure this by creating/appending to a file main.cf.local: Univention Corporate Server

Greetings
Daniel