Join the community today
Become a Member

Disable TLS 1.1

Discussion in 'Feature Requests & Suggestions' started by Meirami, Nov 1, 2018.

  1. Meirami

    Meirami Member

    118
    13
    18
    Dec 21, 2017
    Ratings:
    +37
    Local Time:
    1:30 PM
    I saw it's possible to disable TLS 1.0 by using custom_config.inc. Can we disable TLS 1.1 with same method? TLS 1.2 and 1.3 are enough for me.

    BTW. Is there a full list of commands for custom_config.inc somewhere?
     
  2. eva2000

    eva2000 Administrator Staff Member

    36,915
    8,074
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +12,438
    Local Time:
    9:30 PM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    Not right now there isn't but most folks won't use TLS 1.1 it's either TLS 1.0, 1.2 or 1.3 with most folks' clients.

    As to list, custom_config.inc persistent config file is meant to allow you to override the default variables within centmin.sh itself without editing centmin.sh file itself so you can inspect centmin.sh for the variables. Though there is an example file at /usr/local/src/centminmod/examples/custom_config.inc on local server as well on official github repo at centminmod/centminmod which basically replicate what's in centmin.sh itself.

    If unsure what a variable does, just try forum searching the variable :) You can limit searches to these forums too for finer grain focus

     
  3. rdan

    rdan Premium Member Premium Member

    4,369
    1,053
    113
    May 25, 2014
    Ratings:
    +1,524
    Local Time:
    7:30 PM
    Mainline
    10.2
  4. eva2000

    eva2000 Administrator Staff Member

    36,915
    8,074
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +12,438
    Local Time:
    9:30 PM
    Nginx 1.15.x
    MariaDB 5.5/10.x
    Yeah that is ideal way right now. I believe @Meirami is asking if there's an automated way to do it
     
    • Like Like x 1
  5. Meirami

    Meirami Member

    118
    13
    18
    Dec 21, 2017
    Ratings:
    +37
    Local Time:
    1:30 PM
    That's right. I bet I will forget to edit ssl conf when it gets overwritten. So it would be nice to set in custom_config.inc.

    This must be old custom_config.inc
    Custom Config options available for Centminmod.
    I found it with Google search.
     
..