Symptoms
When setting the SSL Minimum Protocol setting in WHM's Mailserver Configuration module, we see that the SSLv3 option remains selectable despite SSLv3 support being removed in Dovecot 2.4.
Cause
Note: SSLv3 was deprecated in June 2015 due to critical security vulnerabilities. Dovecot dropped support for SSLv3 in version 2.4.
We've opened an internal case for our development team to investigate this further. For reference, the case number is CPANEL-50673. Follow this article to receive an email notification when a solution is published in the product.
Resolution
Select a supported SSL Minimum Protocol. More information can be found in the following article:
What are the minimum SSL protocol versions that Dovecot 2.4 accepts?
Comments
1 comment
Update: CPANEL-50673 is solved in the following cPanel & WHM version(s) and newer:
Article is closed for comments.