run https://en.internet.ne/mail mail server scan on my server

all of but needs to change two things

1. xeams use weak DH param (1024bit)

needs to replace DH Param file to 2048 or 4096bit

2. xeams allow to TLS renegotiation

negotiation TLS Setting by client can break TLS Security (can use weak cipher, low bit encrypt, be ban old style key exchange...)

how can i can fix it?

misstype on URL

https://en.internet.nl/mail is valid

You can set the DH Key Size adding the following line in server.properties.

jdk.tls.ephemeralDHKeySize=2048

You can setup custom cipher lists by adding comma separated ciphers like:

ssl.cipher.list=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, ....

Check http://www.xeams.com/server-properties.htm for details about server.properties file.

Hi,

Thanks for this, it solved the problem with the DH Keysize.

But how can we prevent TLS renegotiation?

Thanks,
Peter