Demo
Demo

Knowledge base

smtp-ciphers verified

Cipher list for intake TLS

in the configuration this is a linesmtp-ciphers: !aNULL:!eNULL:!LOW:!SSLv2:!EXPORT:!EXPORT56:FIPS:MEDIUM:HIGH:@STRENGTH

OpenSSL cipher specification for the intake, shipped with a conservative list already in place.

Values

Values
OpenSSL cipher spec
Default
!aNULL:!eNULL:!LOW:!SSLv2:!EXPORT:!EXPORT56:FIPS:MEDIUM:HIGH:@STRENGTH · taken from the build
applying
restart required
where it can be set
in the config file · with a startup flag · as an environment variable

In detail

The shipped value excludes null, low-grade and export ciphers and orders the rest by strength — sane defaults that need no attention unless a customer's compliance rules demand a narrower set.