leap_platform.git/puppet/modules, branch 0.3.0rc3 [leap_platform] It turns out postfix's variable for 1024bit DH parameters can actually take a file of arbitrary length (#4012) 2013-10-06T21:31:38+00:00 Micah Anderson micah@leap.se 2013-10-03T17:16:43+00:00 5d25466e8365577c48df98afdd22d2880b7ef5ce Neither Postfix nor OpenSSL actually care about the size of the prime in "smtpd_tls_dh1024_param_file". You can make it 2048 bits Change-Id: Id60deec93547e7df6dfc414209afaf9d53c710b5 
 Neither Postfix nor OpenSSL actually care about the size of the prime in
 "smtpd_tls_dh1024_param_file".  You can make it 2048 bits

Change-Id: Id60deec93547e7df6dfc414209afaf9d53c710b5
implement stripping user's home IPs from Received headers (#3866) 2013-10-06T21:31:16+00:00 Micah Anderson micah@leap.se 2013-10-03T21:57:48+00:00 ed694ff4b412c36801e17c93c0ee587da1ebc981 Change-Id: I6d78286f84144bba5fd3166cc0264570e4fd3ee0 
Change-Id: I6d78286f84144bba5fd3166cc0264570e4fd3ee0
only use TLSv1 or later for smtp (Feature #4011) 2013-10-06T21:31:16+00:00 Micah Anderson micah@leap.se 2013-10-03T17:45:57+00:00 9acb4a7c2a36f12a5ca71e5c4c74364d344e2c5f Disable on the client-side with postfix (smtp) SSLv2/SSLv3 and only allow for TLSv1 or later SMTP servers almost universally support TLSv1. There are very few servers that don't (the few that are would result sending in the clear for these, but the alternative isn't much better). This is unlikely to cause any significant problems. Change-Id: I8f98ba32973537905b71f63b100f41a420b6aa3f 
Disable on the client-side with postfix (smtp) SSLv2/SSLv3 and only allow for TLSv1 or later

SMTP servers almost universally support TLSv1. There are very few servers that don't (the few that are would result sending in the clear for these, but the alternative isn't much better). This is unlikely to cause any significant problems.

Change-Id: I8f98ba32973537905b71f63b100f41a420b6aa3f
fix name of base class file 2013-10-03T19:27:33+00:00 Micah Anderson micah@leap.se 2013-10-03T19:27:33+00:00 f7bb77c38d31021e810b1b55097fa3329bd73ce7 Change-Id: I844970f1c8f895d5a460d5082bfa1a2a88b32ecd 
Change-Id: I844970f1c8f895d5a460d5082bfa1a2a88b32ecd
Merge branch 'feature/3953' into develop 2013-10-03T17:53:27+00:00 Micah Anderson micah@leap.se 2013-10-03T17:53:27+00:00 ab6f1ad59dd8e9ab4952bf2e9ab8943d3ae60f44 






It turns out postfix's variable for 1024bit DH parameters can actually take a file of arbitrary length (#4012)
2013-10-03T17:50:14+00:00

Micah Anderson
micah@leap.se

2013-10-03T17:16:43+00:00

56f7b18d03f5ea337a68d653b422834c9283cfab

 Neither Postfix nor OpenSSL actually care about the size of the prime in
 "smtpd_tls_dh1024_param_file".  You can make it 2048 bits

Change-Id: Id60deec93547e7df6dfc414209afaf9d53c710b5





 Neither Postfix nor OpenSSL actually care about the size of the prime in
 "smtpd_tls_dh1024_param_file".  You can make it 2048 bits

Change-Id: Id60deec93547e7df6dfc414209afaf9d53c710b5







setup smtpd_tls_eecdh_grade to 'ultra' and configure the smtpd_tls_dh1024_param file, after generating it (#3953)
2013-10-02T16:47:11+00:00

Micah Anderson
micah@leap.se

2013-09-26T21:20:19+00:00

f531ec536a55d756262329f516f1b3bdccf4f0b4

Change-Id: I8e88a4862cda052c2f0ca0149f1d0753c7c83cb5





Change-Id: I8e88a4862cda052c2f0ca0149f1d0753c7c83cb5







Merge branch 'bug/3869' into develop
2013-10-02T16:40:48+00:00

Micah Anderson
micah@leap.se

2013-10-02T16:40:48+00:00

a8ef394f67d8dc742f18a17302ec0f449e53eaa6












Merge branch 'bug/3959' into develop
2013-10-02T16:27:50+00:00

Micah Anderson
micah@leap.se

2013-10-02T16:27:50+00:00

a5b89fab542cf11ca3cd93ca09f2e9c6e5af2401












Merge branch 'feature/3955' into develop
2013-10-02T16:26:24+00:00

Micah Anderson
micah@leap.se

2013-10-02T16:26:24+00:00

05630d4640d295a8c42a916fea6bbae49f29bc77