Skip to content

Instantly share code, notes, and snippets.

@MalloZup

MalloZup/hawk-ssl.md

Last active November 18, 2020 11:14
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save MalloZup/f7cd3020e1165c800a4323860e8acb86 to your computer and use it in GitHub Desktop.
Save MalloZup/f7cd3020e1165c800a4323860e8acb86 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
hawk-ssl.md

Disable TLS 1.0 and 1.1

ONLY SLE12 or LEAP12 systems

  1. Edit file: vim /srv/www/hawk/config/puma.rb 
  ssl_bind @listen, @port, cert: @cert, key: @key, verify_mode: 'none', no_tlsv1: true,  no_tlsv1_1: true
  1. restart hawk with systemctl restart hawk

Testing your ssl setup with :

I tested with https://github.com/drwetter/testssl.sh

Regarding SLE15 and leap15

Sle 15 and higher version of hawk will provide by default tls 1.0 and 1.1 disabled.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment