cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who Me Too'd this topic

TLS Vulnerabilities.

L1 Bithead

Hi

 

I am running Minemeld on Ubuntu 16.04

 

The server is starting to show up in Vulnerability Scans depsite updating Ubuntu.

 

This is a list of the Vulnerbilties.

 

TLS Server Supports TLS version 1.0
TLS Server Supports TLS version 1.1
Diffie-Hellman group smaller than 2048 bits
TLS/SSL Birthday attacks on 64-bit block ciphers (SWEET32)
TLS/SSL Server Supports 3DES Cipher Suite
TLS/SSL Server Is Using Commonly Used Prime Numbers
TLS/SSL Server Supports The Use of Static Key Ciphers
TLS/SSL Server is enabling the BEAST attack

 

I suspect therefore the Minemeld may rely on some of the above?

 

Is there anyway i can resolve these vulnerabilities without detrimentally impacting Minemeld?

 

Regards

 

Stu

Who Me Too'd this topic