From 22c47729b8ca3c0a38ddfee1f50f3641d779d30b Mon Sep 17 00:00:00 2001
From: Ossi Herrala <oherrala@gmail.com>
Date: Mon, 9 Nov 2015 09:23:29 +0000
Subject: [PATCH] sendmail: Disable SSLv2. Prefer server's cipher order in TLS
 handshake.

---
 sendmail/templates/sendmail.mc.erb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/sendmail/templates/sendmail.mc.erb b/sendmail/templates/sendmail.mc.erb
index 18c8cc7..74fd463 100644
--- a/sendmail/templates/sendmail.mc.erb
+++ b/sendmail/templates/sendmail.mc.erb
@@ -105,3 +105,6 @@ dnl #
 <% end -%>
 MAILER(smtp)dnl
 MAILER(procmail)dnl
+LOCAL_CONFIG
+O ServerSSLOptions=+SSL_OP_NO_SSLv2 +SSL_OP_CIPHER_SERVER_PREFERENCE
+O ClientSSLOptions=+SSL_OP_NO_SSLv2