[Koha-bugs] [Bug 25948] Clean up apache protocols and ciphers

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25948

--- Comment #2 from David Cook <dcook at prosentient.com.au> ---
Comment on attachment 106645
  --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=106645
Bug 25948: Clean up apache-site-https a little

Review of attachment 106645:
 --> (https://bugs.koha-community.org/bugzilla3/page.cgi?id=splinter.html&bug=25948&attachment=106645)
-----------------------------------------------------------------

::: debian/templates/apache-site-https.conf.in
@@ +12,4 @@
>  # OPAC
>  <VirtualHost *:80> #https
>  #  SSLEngine on
> +#  SSLProtocol -all +TLSv1.2 +TLSv1.1

TLSv1.1 is deprecated now too

Should include +TLSv1.3

@@ +39,4 @@
>  # Intranet
>  <VirtualHost *:80> #https
>  #  SSLEngine on
> +#  SSLProtocol -all +TLSv1.2 +TLSv1.1

TLSv1.1 is deprecated now too

Should include +TLSv1.3

-- 
You are receiving this mail because:
You are watching all bug changes.