TLS 1.0 & 1.1

[nelsonw]

Hi,

We are running a Vulnerability Report against our Nagios Server, and it is highlighting the use of TLS 1.0 and 1.1.

I am on a very recent version, I believe TLS 1.0 and 1.1 was addressed back in 2017.

Please advise how I can disable TLS 1.0 and 1.1 within Nagios XI


Regards,
Nelson

[lmiltchev]

This has nothing to do with Nagios - most probably you would need to modify your apache configs in order to disable outdated TLS versions. There are some guides on the Internet, e.g. this one:

https://www.leaderssl.com/news/471-how- ... -in-apache

This is out of scope of Nagios support.

P.S.
In XI, you could also change the TLS version that is used by curl by going to Admin > System Config > System Settings > Security > PHP cURL SSL Version, and selecting TLSv1.2.