From a77adb886ef7ed2efa8441dcd823d5f7e3f97183 Mon Sep 17 00:00:00 2001 From: manuel Date: Wed, 22 Jan 2025 14:12:55 +0100 Subject: Do not enable legacy TLS version any longer --- qmail-remote.c | 1 - 1 file changed, 1 deletion(-) (limited to 'qmail-remote.c') diff --git a/qmail-remote.c b/qmail-remote.c index a743e06..14114cf 100644 --- a/qmail-remote.c +++ b/qmail-remote.c @@ -487,7 +487,6 @@ static int tls_init(struct ip_mx *current_mx) smtptext.len = 0; tls_quit_error("ZTLS error initializing ctx"); } - SSL_CTX_set_min_proto_version(ctx, TLS1_VERSION); /* TLS renegotiation is possible cpu resource attack */ SSL_CTX_set_options(ctx, SSL_OP_NO_RENEGOTIATION); /* SMTP does not suffer from truncation attacks due to its application framing */ -- cgit v1.2.3