From: | dateno1 |
---|---|
Date: | 2/19/19 10:49 PM |
Topic: | How Can i change TLS Setting |
Type: | Installation |
Post a follow up |
run https://en.internet.ne/mail mail server scan on my server
all of but needs to change two things
1. xeams use weak DH param (1024bit) needs to replace DH Param file to 2048 or 4096bit
2. xeams allow to TLS renegotiation negotiation TLS Setting by client can break TLS Security (can use weak cipher, low bit encrypt, be ban old style key exchange...)
how can i can fix it?
|
|
Top |
From: | dateno1 |
---|---|
Date: | 2/19/19 10:51 PM |
Topic: | How Can i change TLS Setting |
Type: | Installation |
Post a follow up |
misstype on URL https://en.internet.nl/mail is valid |
|
Top |
From: | Anonymous |
---|---|
Date: | 2/20/19 10:47 AM |
Topic: | How Can i change TLS Setting |
Type: | Installation |
Post a follow up |
You can set the DH Key Size adding the following line in server.properties.
You can setup custom cipher lists by adding comma separated ciphers like:
Check http://www.xeams.com/server-properties.htm for details about server.properties file. |
|
Top |
From: | Peter Baumann |
---|---|
Date: | 8/13/19 7:07 AM |
Topic: | How Can i change TLS Setting |
Type: | Installation |
Post a follow up |
Hi, Thanks for this, it solved the problem with the DH Keysize. But how can we prevent TLS renegotiation? Thanks, |
|
Top |