Difference between revisions of "Postfix PCI Compliance in ZCS"

m (Adding Article Footer and Categories)
Line 1: Line 1:
=Working towards PCI Compliance for Zimbra 5.0.x=
 
 
 
===Reconfigure the Postfix SSL/TLS settings===
 
===Reconfigure the Postfix SSL/TLS settings===
  
Line 12: Line 10:
  
 
  postconf -e smtpd_tls_mandatory_protocols="SSLv3, TLSv1"
 
  postconf -e smtpd_tls_mandatory_protocols="SSLv3, TLSv1"
  postconf -e smtpd_tls_mandatory_ciphers="medium, high"
+
  postconf -e smtpd_tls_mandatory_ciphers="high"
 +
postconf -e smtpd_tls_exclude_ciphers="aNULL, MD5"
  
 
The SSL/TLS settings are now reconfigured.  The changes will take effect immediately.
 
The SSL/TLS settings are now reconfigured.  The changes will take effect immediately.
Line 19: Line 18:
  
 
  zmlocalconfig -e smtpd_tls_mandatory_protocols="SSLv3, TLSv1"
 
  zmlocalconfig -e smtpd_tls_mandatory_protocols="SSLv3, TLSv1"
  zmlocalconfig -e smtpd_tls_mandatory_ciphers="medium, high"
+
  zmlocalconfig -e smtpd_tls_mandatory_ciphers="high"
 +
zmlocalconfig -e smtpd_tls_exclude_ciphers="aNULL, MD5"
 +
 
 +
Reference - http://www.postfix.org/TLS_README.html
 +
 
  
  

Revision as of 19:43, 1 December 2009

Reconfigure the Postfix SSL/TLS settings

1. Make a backup of /opt/zimbra/postfix/conf/main.cf in case you need to rollback or refer to after an upgrade.

2. Log in as root in the command line utility. Switch to the zimbra user account.

su - zimbra

3. Type the following commands:

postconf -e smtpd_tls_mandatory_protocols="SSLv3, TLSv1"
postconf -e smtpd_tls_mandatory_ciphers="high"
postconf -e smtpd_tls_exclude_ciphers="aNULL, MD5"

The SSL/TLS settings are now reconfigured. The changes will take effect immediately.

4. To ensure that your changes are not overwritten by a future Zimbra upgrade, you can set them in the local config.

zmlocalconfig -e smtpd_tls_mandatory_protocols="SSLv3, TLSv1"
zmlocalconfig -e smtpd_tls_mandatory_ciphers="high"
zmlocalconfig -e smtpd_tls_exclude_ciphers="aNULL, MD5"

Reference - http://www.postfix.org/TLS_README.html


Verified Against: unknown Date Created: 11/30/2009
Article ID: https://wiki.zimbra.com/index.php?title=Postfix_PCI_Compliance_in_ZCS Date Modified: 2009-12-01



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »

Jump to: navigation, search