SSL vulnerabilities

[CMs222]

Just asking has anyone any fixes for correcting these above SSL vulnerabilities ?
https://threatintelligenceplatform.com/

[Me.B]

Those are warning meaning you could do better with your config. And it's not a big issue.

[CMs222]

Those are warning meaning you could do better with your config. And it's not a big issue.

where would i correct these warnings. where is the config for these to be fixed pls ?

[TGates]

This is how my cipher suite looks:

Code:

SSLEngine on
SSLProtocol ALL -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCipherSuite  ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256

[CMs222]

Thanks -@TGates-
As you know still learning the ropes.
did you manage to fix any of the others ?

Also..
Do you know if wildcard works with the Lets Encrypt set up guide you created >

Code:

./letsencrypt-auto certonly --standalone -d *.mydomain.tld

[Me.B]

wildcard are not yet supported by let's encrypt as each certificate will be linked to a domain.

They are planning to support it but didn't see it yet. So stick to per domain certificate. You can also generate a certificate for many domains but not "*".

M B

[CMs222]

wildcard are not yet supported by let's encrypt as each certificate will be linked to a domain.

They are planning to support it but didn't see it yet. So stick to per domain certificate. You can also generate a certificate for many domains but not "*".

M B

 
Do you mean like this ?

Code:

./letsencrypt-auto certonly --standalone -d support.mydomain.tld -d webmail.mydomain.tld -d mysql.mydomain.tld -d www.mydomain.tld -d mydomain.tld -d mail.mydomain.tld -d demo.mydomain.tld -d panel.mydomain.tld

[Me.B]

yes that will do the trick and works fine.