Changes

From SME Server
Jump to navigationJump to search

SSL Settings (view source)

Revision as of 10:56, 1 May 2020

100 bytes added ,  10:56, 1 May 2020
no edit summary
Line 57: Line 57:  
Save.
 
Save.
   −
Now we can set an overall Cipher or per service.
+
Now we can set an overall Cipher, or per service.
    
Overall we can use (There is no separate setting for https)
 
Overall we can use (There is no separate setting for https)
Line 85: Line 85:  
===Preferred Ciphers===
 
===Preferred Ciphers===
   −
When testing at ssllabs.com we can see that these are the only Ciphers it feels are secure but currently we do have a specific Cipher setting to restrict it to these:
+
When testing at ssllabs.com we can see that these are the only Ciphers it feels are secure but currently we do not have a specific Cipher setting to restrict it to these:
   −
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x9e)  
+
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x9e)  
−
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)
+
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)
−
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f)  
+
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f)  
−
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
+
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
   −
===Testing===
+
==Testing==
    +
===Sites===
 
https://www.ssllabs.com
 
https://www.ssllabs.com
 +
 +
https://testssl.sh/
 +
and
 +
https://github.com/drwetter/testssl.sh
 +
 +
===Commands===
    
Test with:
 
Test with:
Retrieved from "https://wiki.koozali.org/Special:MobileDiff/38738"

Navigation menu