How to disable TLS 1.0 web gui Proxmox Mail Gateway

Discussion in 'Mail Gateway: Installation and configuration' started by Eric Barreto, Feb 10, 2019.

  1. Eric Barreto

    Eric Barreto New Member

    Joined:
    Feb 10, 2019
    Messages:
    6
    Likes Received:
    0
    Hello everyone,

    For security measure, I need to disable tls 1.0, how can I proceed?

    Thanks.
     
  2. heutger

    heutger Active Member

    Joined:
    Apr 25, 2018
    Messages:
    478
    Likes Received:
    115
    Would be fine to know from proxmox side as I'm not aware, where and how the web and api server are configured.
     
  3. Eric Barreto

    Eric Barreto New Member

    Joined:
    Feb 10, 2019
    Messages:
    6
    Likes Received:
    0
  4. heutger

    heutger Active Member

    Joined:
    Apr 25, 2018
    Messages:
    478
    Likes Received:
    115
    Eric Barreto likes this.
  5. Stoiko Ivanov

    Stoiko Ivanov Proxmox Staff Member
    Staff Member

    Joined:
    May 2, 2018
    Messages:
    943
    Likes Received:
    74
    AFAIR this is not 'easily' configurable - please open a feature-request at https://bugzilla.proxmox.com should you need it.

    Currently the workaround would involve patching `/usr/share/perl5/PMG/Service/pmgproxy.pm` (search for 'sslv3 => 0,' and add a 'tlsv1 =>0,' below).
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    Eric Barreto likes this.
  6. Eric Barreto

    Eric Barreto New Member

    Joined:
    Feb 10, 2019
    Messages:
    6
    Likes Received:
    0
    @Stoiko Ivanov

    Thanks for the help, the outline solution seems to work for me, according to sslscan. I tried to disable tlsv1.1 by typing in this syntax: tlsv11, but it did not work.
     
  7. Stoiko Ivanov

    Stoiko Ivanov Proxmox Staff Member
    Staff Member

    Joined:
    May 2, 2018
    Messages:
    943
    Likes Received:
    74
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice