Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/certbot/certbot.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat (limited to 'certbot-postfix/certbot_postfix/constants.py')
-rw-r--r--certbot-postfix/certbot_postfix/constants.py63
1 files changed, 0 insertions, 63 deletions
diff --git a/certbot-postfix/certbot_postfix/constants.py b/certbot-postfix/certbot_postfix/constants.py
deleted file mode 100644
index 40a263a53..000000000
--- a/certbot-postfix/certbot_postfix/constants.py
+++ /dev/null
@@ -1,63 +0,0 @@
-"""Postfix plugin constants."""
-
-# pylint: disable=unused-import, no-name-in-module
-from acme.magic_typing import Dict, Tuple, Union
-# pylint: enable=unused-import, no-name-in-module
-
-MINIMUM_VERSION = (2, 11,)
-
-# If the value of a default VAR is a tuple, then the values which
-# come LATER in the tuple are more strict/more secure.
-# Certbot will default to the first value in the tuple, but will
-# not override "more secure" settings.
-
-ACCEPTABLE_SERVER_SECURITY_LEVELS = ("may", "encrypt")
-ACCEPTABLE_CLIENT_SECURITY_LEVELS = ("may", "encrypt",
- "dane", "dane-only",
- "fingerprint",
- "verify", "secure")
-ACCEPTABLE_CIPHER_LEVELS = ("medium", "high")
-
-# Exporting certain ciphers to prevent logjam: https://weakdh.org/sysadmin.html
-EXCLUDE_CIPHERS = ("aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, "
- "EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CBC3-SHA, KRB5-DES, CBC3-SHA",)
-
-
-TLS_VERSIONS = ("SSLv2", "SSLv3", "TLSv1", "TLSv1.1", "TLSv1.2")
-# Should NOT use SSLv2/3.
-ACCEPTABLE_TLS_VERSIONS = ("TLSv1", "TLSv1.1", "TLSv1.2")
-
-# Variables associated with enabling opportunistic TLS.
-TLS_SERVER_VARS = {
- "smtpd_tls_security_level": ACCEPTABLE_SERVER_SECURITY_LEVELS,
-} # type:Dict[str, Tuple[str, ...]]
-TLS_CLIENT_VARS = {
- "smtp_tls_security_level": ACCEPTABLE_CLIENT_SECURITY_LEVELS,
-} # type:Dict[str, Tuple[str, ...]]
-# Default variables for a secure MTA server [receiver].
-DEFAULT_SERVER_VARS = {
- "smtpd_tls_auth_only": ("yes",),
- "smtpd_tls_mandatory_protocols": ("!SSLv2, !SSLv3",),
- "smtpd_tls_protocols": ("!SSLv2, !SSLv3",),
- "smtpd_tls_ciphers": ACCEPTABLE_CIPHER_LEVELS,
- "smtpd_tls_mandatory_ciphers": ACCEPTABLE_CIPHER_LEVELS,
- "smtpd_tls_exclude_ciphers": EXCLUDE_CIPHERS,
- "smtpd_tls_eecdh_grade": ("strong",),
-} # type:Dict[str, Tuple[str, ...]]
-
-# Default variables for a secure MTA client [sender].
-DEFAULT_CLIENT_VARS = {
- "smtp_tls_ciphers": ACCEPTABLE_CIPHER_LEVELS,
- "smtp_tls_exclude_ciphers": EXCLUDE_CIPHERS,
- "smtp_tls_mandatory_ciphers": ACCEPTABLE_CIPHER_LEVELS,
-} # type:Dict[str, Tuple[str, ...]]
-
-CLI_DEFAULTS = dict(
- config_dir="/etc/postfix",
- ctl="postfix",
- config_utility="postconf",
- tls_only=False,
- ignore_master_overrides=False,
- server_only=False,
-)
-"""CLI defaults."""