CentOS - Jan 2021 - dovecot option PROFILE=SYSTEM

Folks

In examining the file
  /etc/dovecot/conf.d/10-ssl.conf
I see the text line:
  ssl_cipher_list = PROFILE=SYSTEM

Yet, I cannot find any documentation that explains what that causes, 
where the values are stored.  I ask because I don't see that text 
line in other installations of Dovecot 2.3 on other distros.  Can 
anyone point me to an explanation?

David

--On Tuesday, January 05, 2021 7:40 PM -0800 david <david at daku.org>
wrote:
> In examining the file
>   /etc/dovecot/conf.d/10-ssl.conf
> I see the text line:
>   ssl_cipher_list = PROFILE=SYSTEM
>
> Yet, I cannot find any documentation that explains what that causes,
> where the values are stored.  I ask because I don't see that text line
in
> other installations of Dovecot 2.3 on other distros.  Can anyone point me
> to an explanation?
The value of ssl_cipher_list is passed directly to OpenSSL's 
SSL_CTX_set_cipher_list():

<https://www.openssl.org/docs/man1.0.2/man3/SSL_CTX_set_cipher_list.html>

See here for the meaning of PROFILE=SYSTEM:

<https://fedoraproject.org/wiki/Changes/CryptoPolicy#Scope>