From 67e37b077075a9ae074632a23b5a8e9a162f70f4 Mon Sep 17 00:00:00 2001
From: Petter Helset <petter@helset.eu>
Date: Tue, 5 Dec 2017 12:25:42 +0100
Subject: [PATCH] Configurable OpenSSL versions and ciphers (#387)

---
 config/postal.defaults.yml       | 2 ++
 lib/postal/smtp_server/server.rb | 3 ++-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/config/postal.defaults.yml b/config/postal.defaults.yml
index d2f8e70..136d58b 100644
--- a/config/postal.defaults.yml
+++ b/config/postal.defaults.yml
@@ -68,6 +68,8 @@ smtp_server:
   tls_enabled: false
   tls_certificate_path: # Defaults to config/smtp.cert
   tls_private_key_path: # Defaults to config/smtp.key
+  tls_ciphers:
+  ssl_version: SSLv23
   proxy_protocol: false
   log_connect: true
   strip_received_headers: false
diff --git a/lib/postal/smtp_server/server.rb b/lib/postal/smtp_server/server.rb
index 23ed570..a1678b2 100644
--- a/lib/postal/smtp_server/server.rb
+++ b/lib/postal/smtp_server/server.rb
@@ -39,7 +39,8 @@ module Postal
           ssl_context.cert = Postal.smtp_certificates[0]
           ssl_context.extra_chain_cert = Postal.smtp_certificates[1..-1]
           ssl_context.key  = Postal.smtp_private_key
-          ssl_context.ssl_version = "SSLv23"
+          ssl_context.ssl_version = Postal.config.smtp_server.ssl_version if Postal.config.smtp_server.ssl_version
+          ssl_context.ciphers = Postal.config.smtp_server.tls_ciphers if Postal.config.smtp_server.tls_ciphers
           ssl_context
         end
       end