Search results

  1. gizmo

    Where to add Security Headers for all hosts?

    Hi @Cold-Egg, I know how to configure it individually for each virtual host. But for global scope would this not work, for example? VHost Template centralConfigLog > Context > Static URI: / Location: $VH_ROOT/ Accessible: Yes Header Operations: Header always set Strict-Transport-Security...
  2. gizmo

    Limiting SSL/TLS Cipher Suite doesn't work?

    Hi @stevieosaurus, @anditasb in case you guys haven't fixed it, please see my post about how to properly disable CBC ciphers. Though I have no answer for @slowaways on how to remove ciphers with 128 bit keys. Theoretically, this would partially work: "ECDSA+AES256+AESGCM" would remove...
  3. gizmo

    Request to remove weak CBC ciphers from default Virtual Hosts SSL configuration

    Hi, The tooltip for Ciphers says "use our default cipher which follows SSL cipher best practices" is a little misleading. It's good, but because it currently includes weak CBC ciphers even when using v1.8.3 it's not exactly the best. SSL Labs Test result for default configuration shows...
  4. gizmo

    SSL Configuration - Full Chain and Ciphers

    Hi @usOC22 and @Cold-Egg, In case you still haven't had any success with this, I found a solution that works and gets rid of CBC ciphers! Set Ciphers in Virtual Hosts > SSL to this: EECDH+ECDSA+AESGCM (It won't work under Listeners Ciphers since Virtual Hosts default config overrides it)...
  5. gizmo

    Request to disable TLS 1.1 by default

    Hi, I wish that the default configuration only have TLS 1.2 and TLS 1.3 enabled by default. That way, users would be secured from the very beginning, and not have to worry about turning off TLS 1.1. It's already 2025 and this non-secure obsolete version should be retired already.
Top