Server Cipher Order enforcement

sparek-3

• March 23, 2021 16:23

Should SSLHonorCipherOrder (Apache) and ssl_prefer_server_ciphers (Dovecot) be configurable options in cPanel? This would allow the server to dictate the preferred cipher order for both services. This can be accomplished in Exim by adding +cipher_server_preference to the openssl_options directive, but for Apache and Dovecot these are two different options. And these options don't appear to be configurable in the Apache cPanel JSON file or the Dovecot cPanel YAML file. I guess you can do Apache through one of the include files. I don't know of any other way to enable this in Dovecot other than a direct edit of /etc/dovecot/ssl.conf which would get overwritten on each Dovecot configuration rebuild.

• 

  cPRex Jurassic Moderator

  • March 24, 2021 20:32

  Hey there! For the Dovecot option, we have documentation on how to add customizations like that setting at the bottom of this page:

  0
• 

  sparek-3

  • March 25, 2021 21:36

  Indeed, this will work. Thanks!

  0
• 

  cPRex Jurassic Moderator

  • March 26, 2021 14:33

  Sure thing!

  0

Please sign in to leave a comment.