SSL vulnerabilities - Printable Version

SSL vulnerabilities - Printable Version

+- Sentora Support Forums (https://senforums.mach-hosting.com)
+-- Forum: Sentora Forum Archives (https://senforums.mach-hosting.com/forumdisplay.php?fid=5)
+--- Forum: Sentora Public Support Forums v1.0.x (https://senforums.mach-hosting.com/forumdisplay.php?fid=32)
+---- Forum: General Support Forum v1.0.x (https://senforums.mach-hosting.com/forumdisplay.php?fid=36)
+---- Thread: SSL vulnerabilities (/showthread.php?tid=4374)

SSL vulnerabilities - CMs222 - 02-24-2018

[Image: WoqCJ7X.png]

Just asking has anyone any fixes for correcting these above SSL vulnerabilities ?
https://threatintelligenceplatform.com/

RE: SSL vulnerabilities - Me.B - 02-24-2018

Those are warning meaning you could do better with your config. And it's not a big issue.

RE: SSL vulnerabilities - CMs222 - 02-24-2018

(02-24-2018, 10:03 AM)Me.B Wrote: Those are warning meaning you could do better with your config. And it's not a big issue.

where would i correct these warnings. where is the config for these to be fixed pls ?

RE: SSL vulnerabilities - TGates - 02-25-2018

This is how my cipher suite looks:

Code:
SSLEngine on
SSLProtocol ALL -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCipherSuite  ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256

RE: SSL vulnerabilities - CMs222 - 02-25-2018

Thanks -@TGates-
As you know still learning the ropes.
did you manage to fix any of the others ?

Also..
Do you know if wildcard works with the Lets Encrypt set up guide you created >

Code:
./letsencrypt-auto certonly --standalone -d *.mydomain.tld

RE: SSL vulnerabilities - Me.B - 02-26-2018

wildcard are not yet supported by let's encrypt as each certificate will be linked to a domain.

They are planning to support it but didn't see it yet. So stick to per domain certificate. You can also generate a certificate for many domains but not "*".

M B

RE: SSL vulnerabilities - CMs222 - 02-26-2018

(02-26-2018, 01:31 AM)Me.B Wrote: wildcard are not yet supported by let's encrypt as each certificate will be linked to a domain.

They are planning to support it but didn't see it yet. So stick to per domain certificate. You can also generate a certificate for many domains but not "*".

M B

Do you mean like this ?

Code:
./letsencrypt-auto certonly --standalone -d support.mydomain.tld -d webmail.mydomain.tld -d mysql.mydomain.tld -d www.mydomain.tld -d mydomain.tld -d mail.mydomain.tld -d demo.mydomain.tld -d panel.mydomain.tld

RE: SSL vulnerabilities - Me.B - 02-27-2018

yes that will do the trick and works fine.