Require TLS for connecting

There's no excuse for using IMAP or POP3 without TLS at this point. I thought
that port was an unambiguous "use TLS" indicator, but apparently I use the
imap/143 with ~STARTTLS (commit 8626ddaf5ec4 in adehnert-sysconfig/salt) with
Alpine, so seems good to enforce this on the server.

diff --git a/conf.d/10-ssl.conf b/conf.d/10-ssl.conf
index 3eb0629789f1d701300ce967a630f3c93cfe8ad7..9e3f49f05f8d3abd75c227c031ee8d144b8dafd6 100644 (file)
--- a/conf.d/10-ssl.conf
+++ b/conf.d/10-ssl.conf
@@ -3,7 +3,7 @@
 ##
 
 # SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt>
 ##
 
 # SSL/TLS support: yes, no, required. <doc/wiki/SSL.txt>

-ssl = yes
+ssl = required

 
 # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before
 # dropping root privileges, so keep the key file unreadable by anyone but
 
 # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before
 # dropping root privileges, so keep the key file unreadable by anyone but