Disable TLS 1.0 / TLS 1.1 in Lighttpd
Added by Train over 10 years ago
Hello,
There are settings to enable/disable the use of sslv2 and sslv3 (ssl.use-sslv2 = "disable", ssl.use-sslv3 = "disable"). I cannot find out if these settings exist for TLS 1.0 and 1.1 (on this page: http://redmine.lighttpd.net/projects/1/wiki/Docs_ConfigurationOptions#SSL).
How can I disable either TLS 1.0 and/or TLS 1.1 and thus only provide TLS 1.2 to my visitors?
Replies (2)
RE: Disable TLS 1.0 / TLS 1.1 in Lighttpd - Added by nitrox over 10 years ago
see Docs_SSL and set ciphers used with tls 1.2. Generally you also want it to be able to downgrade to 1.0 and 1.1.
RE: Disable TLS 1.0 / TLS 1.1 in Lighttpd - Added by Train over 10 years ago
Yep that works. Thanks!