TLS Vulnerabilities.

Stuart_Walton — Tue, 21 Apr 2020 10:39:09 GMT

I am running Minemeld on Ubuntu 16.04

The server is starting to show up in Vulnerability Scans depsite updating Ubuntu.

This is a list of the Vulnerbilties.

TLS Server Supports TLS version 1.0

TLS Server Supports TLS version 1.1

Diffie-Hellman group smaller than 2048 bits

TLS/SSL Birthday attacks on 64-bit block ciphers (SWEET32)

TLS/SSL Server Supports 3DES Cipher Suite

TLS/SSL Server Is Using Commonly Used Prime Numbers

TLS/SSL Server Supports The Use of Static Key Ciphers

TLS/SSL Server is enabling the BEAST attack

I suspect therefore the Minemeld may rely on some of the above?

Is there anyway i can resolve these vulnerabilities without detrimentally impacting Minemeld?

Regards

Stu

Re: TLS Vulnerabilities.

lmori — Tue, 21 Apr 2020 10:41:41 GMT

all the TLS settings are defined in the nginx config. You can safely change the nginx config to apply your TLS best practices.

Luigi