diff options
| author | manu <manu> | 2013-09-19 10:54:05 +0000 |
|---|---|---|
| committer | manu <manu> | 2013-09-19 10:54:05 +0000 |
| commit | 6baba59d14a481369d3e68005d91d087490da500 (patch) | |
| tree | 8ac0bfc291cdf43cf5aab279f9e1c5b771744f44 /mail/sendmail/options.mk | |
| parent | 3641394a26c1867d959b3afab5ef990b247cad7b (diff) | |
| download | pkgsrc-6baba59d14a481369d3e68005d91d087490da500.tar.gz | |
Add a ffr_tls_1 option to sendmail, which enable the O CipherList
option for sendmail.cf. it is required in order to remove weak ciphers,
and enforce Forward Secrecy on modern MUA
Usage example:
O CipherList=DH@STRENGTH:HIGH:!MD5:!DES:!aNULL:!eNULL
Diffstat (limited to 'mail/sendmail/options.mk')
| -rw-r--r-- | mail/sendmail/options.mk | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/mail/sendmail/options.mk b/mail/sendmail/options.mk index 26e36ec3104..4205b114017 100644 --- a/mail/sendmail/options.mk +++ b/mail/sendmail/options.mk @@ -1,7 +1,7 @@ -# $NetBSD: options.mk,v 1.19 2012/12/28 05:27:06 jnemeth Exp $ +# $NetBSD: options.mk,v 1.20 2013/09/19 10:54:05 manu Exp $ PKG_OPTIONS_VAR= PKG_OPTIONS.sendmail -PKG_SUPPORTED_OPTIONS= inet6 db2 ldap sasl tls tcpwrappers +PKG_SUPPORTED_OPTIONS= inet6 db2 ldap sasl tls tcpwrappers ffr_tls_1 PKG_SUGGESTED_OPTIONS= inet6 tcpwrappers PKG_OPTIONS_LEGACY_OPTS+= starttls:tls @@ -37,6 +37,11 @@ PKG_OPTIONS_LEGACY_OPTS+= starttls:tls .endif ### +### 'For Future Release' FFR_TLS_1 options: CipherList, multiple certs +### +# Nothing to do here, activation is done in Makefile + +### ### Use tcpwrappers for network access control to sendmail ### .if !empty(PKG_OPTIONS:Mtcpwrappers) |