SSLv3 is still a selectable option for SSL Minimum Protocol setting on v132. Print

  • 0

Symptoms

When setting the "SSL Minimum Protocol" setting in WHM's Mailserver Configuration module we are seeing the SSLv3 option is still selectable despite SSLv3 support being removed in Dovecot 2.4.

 

Description

Please note that SSLv3 was deprecated in June 2015 due to critical security vulnerabilities. Dovecot dropped support for SSLv3 in version 2.4.

We've opened an internal case for our development team to investigate this further. For reference, the case number is CPANEL-50673. Follow this article to receive an email notification when a solution is published in the product. 

 

Workaround

Select a supported SSL Minimum Protocol. More information can be found in the following article:

What are the minimum SSL protocol versions that Dovecot 2.4 accepts?


Was this answer helpful?
Back