How to disable TLS 1.0 web gui Proxmox Mail Gateway

Discussion in 'Mail Gateway: Installation and configuration' started by Eric Barreto, Feb 10, 2019.

  1. Eric Barreto

    Eric Barreto New Member

    Joined:
    Feb 10, 2019
    Messages:
    6
    Likes Received:
    0
    Hello everyone,

    For security measure, I need to disable tls 1.0, how can I proceed?

    Thanks.
     
  2. heutger

    heutger Active Member

    Joined:
    Apr 25, 2018
    Messages:
    565
    Likes Received:
    140
    Would be fine to know from proxmox side as I'm not aware, where and how the web and api server are configured.
     
  3. Eric Barreto

    Eric Barreto New Member

    Joined:
    Feb 10, 2019
    Messages:
    6
    Likes Received:
    0
  4. heutger

    heutger Active Member

    Joined:
    Apr 25, 2018
    Messages:
    565
    Likes Received:
    140
    Eric Barreto likes this.
  5. Stoiko Ivanov

    Stoiko Ivanov Proxmox Staff Member
    Staff Member

    Joined:
    May 2, 2018
    Messages:
    1,208
    Likes Received:
    104
    AFAIR this is not 'easily' configurable - please open a feature-request at https://bugzilla.proxmox.com should you need it.

    Currently the workaround would involve patching `/usr/share/perl5/PMG/Service/pmgproxy.pm` (search for 'sslv3 => 0,' and add a 'tlsv1 =>0,' below).
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    Eric Barreto likes this.
  6. Eric Barreto

    Eric Barreto New Member

    Joined:
    Feb 10, 2019
    Messages:
    6
    Likes Received:
    0
    @Stoiko Ivanov

    Thanks for the help, the outline solution seems to work for me, according to sslscan. I tried to disable tlsv1.1 by typing in this syntax: tlsv11, but it did not work.
     
  7. Stoiko Ivanov

    Stoiko Ivanov Proxmox Staff Member
    Staff Member

    Joined:
    May 2, 2018
    Messages:
    1,208
    Likes Received:
    104
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice