On 30 Jul 2013, at 08:56, Cyborg <[email protected]> wrote: > as i just read about PFS, i was wondering how exim is handling the key > exchange. > > the article suggested to use these ciphers in this order: > > TLS_ECDHE_RSA_WITH_RC4_128_SHA > TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA > TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA > TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
Look for tls_require_ciphers in the docs. Also read up on openssl_options, and http://www.exim.org/exim-html-current/doc/html/spec_html/ch-encrypted_smtp_connections_using_tlsssl.html#SECTreqciphssl http://www.exim.org/exim-html-current/doc/html/spec_html/ch-encrypted_smtp_connections_using_tlsssl.html#SECTreqciphgnu Graeme -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
