> Well the full list of grades is:

Thanks. I finally found the GRADE's (default), editable cipherlists on
lmtp(8):

 tls_high_cipherlist   (ALL:!EXPORT:!LOW:!MEDIUM:+RC4:@STRENGTH)
 tls_medium_cipherlist (ALL:!EXPORT:!LOW:+RC4:@STRENGTH)
 tls_low_cipherlist    (ALL:!EXPORT:+RC4:@STRENGTH)
 tls_export_cipherlist (ALL:+RC4:@STRENGTH)
 tls_null_cipherlist   (eNULL:!aNULL)

Editing the GRADE's definition, and specifying the mod'd GRADE solves my
problem.

> If you are tuning the defaults, you're probably working
> too hard. The defaults were chosen carefully, and in most casses
> changes are unwise.

For public facing servers, I agree. For my private setup, I needed to be
able to change them.

Reply via email to