[Bug 1381537] Re: Dovecot version in precise too old to switch off SSLv3 protocol for "poodle" fix

Benjamin Greiner greiner at dsi.uni-stuttgart.de
Mon Oct 20 15:35:35 UTC 2014


It is not correct. Adding !SSLv3 to the cipher list removes the set of
*ciphers* specified in the SSLv3 cipher suite [1], which would also
disable ciphers listed in other suites. It has no effect on the
*protocols* used.

[1] http://www.openssl.org/docs/apps/ciphers.html

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to dovecot in Ubuntu.
https://bugs.launchpad.net/bugs/1381537

Title:
  Dovecot version in precise  too old to switch off SSLv3 protocol for
  "poodle" fix

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1381537/+subscriptions



More information about the Ubuntu-server-bugs mailing list