Postfix and encryption

by | Jun 28, 2015 | Linux

After getting my web server ramping up on encryption, the next target is the mail delivery and transport agent. In my case this is postfix and here are the settings for the TLS part: # TLS parameters smtp_use_tls = yes smtp_tls_CAfile =...

Going SSL, Perfect Forward Secrecy, HSTS, HPKP

by | May 21, 2015 | Linux

I’m going all in – SSL. Here is what I used to set it up: Install OpenVPN easy-rsa Version 3 (Find it on github). Moving the easryrsa3 folder to your desired location and edit the vars file to use SHA256 and 4096 key length. I also entered some data for my...