Fixing the POODLE (SSLv3) vulnerability (ZCS 7.x, ZCS 8.0.x, ZCS 8.x)

jorgedlcruz · Post by **jorgedlcruz** » Fri Oct 31, 2014 7:37 pm

Fixed, we are also looking for what reason the TinyMCE do this strange things.

Thank you for your feedback metux!

ljramos · Post by **ljramos** » Fri Dec 19, 2014 9:26 am

This is a good write-up for that

http://blog.capitar.com/getting-a-bette ... bs-rating/

metux · Post by **metux** » Fri Dec 19, 2014 3:13 pm

Interesting that we need the proxy for better SSL security.

hmm, why not completely offloading all the SSL handling (and probably other security stuff) to the proxy and so make mailbox a bit thinner ?

n.sossonko · Post by **n.sossonko** » Thu Jan 15, 2015 7:34 am

PSA: See https://wiki.zimbra.com/wiki/Security/Collab/86#MTA where there's some commentary on additional steps for 8.6. Specifically, these changes should be made as well:

postconf -e lmtp_tls_mandatory_protocols='!SSLv2, !SSLv3'

postconf -e smtp_tls_mandatory_protocols='!SSLv2, !SSLv3'

postconf -e smtpd_tls_mandatory_protocols='!SSLv2, !SSLv3'